4e6f4f879d108b31af75c39d86c31259 | Triage

Sharing

General

Target

4e6f4f879d108b31af75c39d86c31259
Size

289KB
MD5

4e6f4f879d108b31af75c39d86c31259
SHA1

5332c293748379bee739a12cd3a0f5d5bd1c6000
SHA256

0460ace729c907248d054a681c7d3981af23be77c3046f0ba09dde586b31893d
SHA512

6fe29d04722ae97fbcd64f1684c260254412a1f9b8ca2b3d8155b35d006c369101f26e35d2c3553d412891c5b02357bb5b17c49b2eaeb6186299b94ecafb5330
SSDEEP

6144:MlN1/kOJIBG03on0btyb6bWxxDZbygY/gih9KgJk:MlviBGtn0bXWTDJyDbhPk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e6f4f879d108b31af75c39d86c31259

Files

4e6f4f879d108b31af75c39d86c31259
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.gda
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE