4e9c3b921e13aa822755bbafdd30b791 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e9c3b921e13aa822755bbafdd30b791
Size

11KB
MD5

4e9c3b921e13aa822755bbafdd30b791
SHA1

5c36985f735b4b306eaaa131662b72d0c14c5735
SHA256

3ee43db8f47f265ffcf28798c6da529266aa70bef359c0c04b1d9825fd33841c
SHA512

d722980f67d940ea215667da08c7841cb09fa98b0215735be435d17195bef08787a53df5a3454f8fb30f67046890fbd50998a32f15826b555e5990e2d2409aad
SSDEEP

192:nlf5DVkKRqXNLuhq31A59zo9PkPwBRvIwXHPKqWvw2fCnBWpTsnnnsnyznnsnWa2:TDVkK8Xlh3aM41yNao1WFPjA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e9c3b921e13aa822755bbafdd30b791

Files

4e9c3b921e13aa822755bbafdd30b791
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

n-coded
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

n-coded
Size: - Virtual size: 317B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 634B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.n-coder
Size: 360B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE