4ff47df065d731f0a6d0e729f8b06108 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ff47df065d731f0a6d0e729f8b06108
Size

1.1MB
MD5

4ff47df065d731f0a6d0e729f8b06108
SHA1

114c173f3c49cdd936941053d24f8568e9626c99
SHA256

4274690c76a27ea012221e208b174e347ca6416bd8c46214b6150a63a75d1156
SHA512

0b5d1e57f6f71101f244af844af7ccce130fe7e9699c9dfd58014ffc3176a0eaab70424daa123292d3c9af3766e9cdb01a4ccba99bfbb13bee12926d4f5aed32
SSDEEP

24576:e4oKmf5R/pOCuxGU13IlBwaa6NKHb/Jdc8UlTk:e4uv/pOCIGk3Ivwaa6IHz3c8UF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ff47df065d731f0a6d0e729f8b06108

Files

4ff47df065d731f0a6d0e729f8b06108
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 787KB - Virtual size: 786KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 209KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ