4fcef7644408d6016f66294547c58291 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fcef7644408d6016f66294547c58291
Size

32KB
MD5

4fcef7644408d6016f66294547c58291
SHA1

0c679d4521f5e647dc3c0a76a9d9b55bd481d7ea
SHA256

b8e079a08feb957057390875d4b35592e50ca86a5666470fef9af016ab238a0b
SHA512

fd7f652b3c564391ef7c81f9a4503242a29e17be07163042d88330fabdc1adde771f3396e19fc4acdbe8b2370d7aedbeb5358b496bc1914099b0a603762958c7
SSDEEP

384:dzQ5UXwQUUpUEoPwoI3ev8T6xbPme3JU1SUtn:dcOyJP26bPmv1Ss

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fcef7644408d6016f66294547c58291

Files

4fcef7644408d6016f66294547c58291
.exe windows:4 windows x86 arch:x86

bdafa3bde2ca46846f300156aa396c42

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

vb40032

ord617
ord619
ord632
ord652
ord100
ord199
ord537
ord595

Sections

.text
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ