4cff8b5003b80d8193176b19b97f4bb1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cff8b5003b80d8193176b19b97f4bb1
Size

861KB
MD5

4cff8b5003b80d8193176b19b97f4bb1
SHA1

4c0ec3c237056395faad2249a61ff6cabfe8599e
SHA256

65b3168e9a65c6f69e4c318374fb59a0190419b0a01ffc64959110fd5d47895e
SHA512

510a3a07e34fdcf1e75429f809ce14fc401fb36eec2f581e1cbc7398d44da72d7c30b79ce807e540b77eea97445db0c1d0116f46716d9e720f58bc2a708e5628
SSDEEP

12288:SXo7O/fU7yXA2x5qi0PR5qkho7fghqLIEc44E4G80o8pWTdunILv+7:q3U7yl5qibkm7fFAK/oUcOILv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cff8b5003b80d8193176b19b97f4bb1

Files

4cff8b5003b80d8193176b19b97f4bb1
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 859KB - Virtual size: 858KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ