4fb96901220f79bc07e487e51b2e6b2c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fb96901220f79bc07e487e51b2e6b2c
Size

2.4MB
MD5

4fb96901220f79bc07e487e51b2e6b2c
SHA1

02465703a53f6d6ff886c4d1e0c9e3a945f51da5
SHA256

14f314f99e1a01d0853da761141ac47ec76971e56b6991eace2c60d975590578
SHA512

d50222ff638666da317b12e69adf6212273aaeaddf6e9528a2cbae790fc0d4391eb828eb5d136e2ab870f0c2e97328e91318fde2107b183fa73bffb2499e6904
SSDEEP

24576:OHNgHuHuHNgHuHNgHeN4l7WUtLpwbtLpwghVZ5DQ7nccuzKPgssStPUvgB:Wa22a2aPbtL2tLFfDQghKPgssSt2gB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fb96901220f79bc07e487e51b2e6b2c

Files

4fb96901220f79bc07e487e51b2e6b2c
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ