4ebda2e8aadb0c4b6ac1a9146cd01ff5[.]exe | Triage

Sharing

General

Target

4ebda2e8aadb0c4b6ac1a9146cd01ff5.exe
Size

304KB
MD5

2589ffb895ebb1757c6f0b8af22e6b37
SHA1

751a53d9af3b6192fcd60ef4d421cb7fa5819160
SHA256

2dee8622688ea92ab47f0365be6989a00d92bca9bb96d40f1a2fe3b89c8427b3
SHA512

a6dd4a7ddae4dafd479eba4aeefe00bb2416f03089074328bab0e7e5016ace53295f4a169c27ea1ccfd4239ea01661bd20377d7a6dffb27d4e21b74a117e7d4b
SSDEEP

6144:7GkLHoXhSr1y4VaSU4UjzZsGRTT8Ta8CgOk6FMf319c:7GkzoXhF4VaSD4ZsI/8Ta85OkcW3A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ebda2e8aadb0c4b6ac1a9146cd01ff5.exe

Files

4ebda2e8aadb0c4b6ac1a9146cd01ff5.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\sigizecem\xigago\tukonunoz_givizadi\yodawusafix\11\j.pdb

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 38.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ