4cff7d9cdcec8591a3022fa9f415313f | Triage

Sharing

General

Target

4cff7d9cdcec8591a3022fa9f415313f
Size

1.5MB
MD5

4cff7d9cdcec8591a3022fa9f415313f
SHA1

4a37eef1b916a7bc044c5f3b5358d9e839c65ce0
SHA256

621f455d7e9d85a27ee0d0be329faf3a4edd1bceb1fc45b1ba5eb45e468bf2f1
SHA512

ca5a91a73f56f98ce4d82a659823ea81f4e9cd8c7103697c211b93ec875b484af74d9b380350e1f241a36a423bff28e7a6885fa05ad42076e4c3ff82379ee75d
SSDEEP

49152:BpAU/AZC5kasC2Uhgt4nWwWwW4MRnWwWwW:BaU/AZ+k/C2unWwWwW4MRnWwWwW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cff7d9cdcec8591a3022fa9f415313f

Files

4cff7d9cdcec8591a3022fa9f415313f
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 624KB - Virtual size: 624KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 870KB - Virtual size: 870KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ