4feede1983085a019e9adfd7ad89c9ba | Triage

Sharing

General

Target

4feede1983085a019e9adfd7ad89c9ba
Size

188KB
MD5

4feede1983085a019e9adfd7ad89c9ba
SHA1

59178223be325d01ba78ee3d4b5ccf25bcdf1794
SHA256

f430d20fc171ede6c4b81a3b06dbe2aa22104e9d04d49fa5a43aa3042245d7fc
SHA512

dab526eb77adeb58a6c747b4e7a5d16954acaa6966430f2d2319fdb883985b790f6dfac8391275154a9da01447f0ed5625fc2896e185589a26804d96fefe4a3e
SSDEEP

3072:ung35fePQtk3XwcezyLJG55dLxzYF5HNCd6m:Gg35fOHioJG55dhw5HNCd6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4feede1983085a019e9adfd7ad89c9ba

Files

4feede1983085a019e9adfd7ad89c9ba
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

YJW!OOC0
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ