4fdf74ebb74efad589f980a495935add | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fdf74ebb74efad589f980a495935add
Size

202KB
MD5

4fdf74ebb74efad589f980a495935add
SHA1

2e0e28ed2f0fd217acfcc73718c2c6fe787311e1
SHA256

113ca4e12798ec690fa28d213fec59ce2ce2b7f97c7924fb7a1eb7fe4340c4f4
SHA512

0718337defa1f9703cf7b574dd66ccd8695c1ca31aa15a5b8bf51471d58686448d023d1ad88b0ef7f591d02a41fa962b32e50e5f57e634b54159940ec4c40498
SSDEEP

6144:qOEKs7bYkdqzyWODOY5AAbaQMOrDLVVD4gDbMwX:A7bYkdqzyWdRAeMLVp4Kw4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fdf74ebb74efad589f980a495935add

Files

4fdf74ebb74efad589f980a495935add
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vsp
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE