a4f78e77907d8ea06d93912ebc29d191629c47270d87882ed9e8948a3bbb77c2 | Triage

Sharing

General

Target

a4f78e77907d8ea06d93912ebc29d191629c47270d87882ed9e8948a3bbb77c2
Size

61KB
MD5

944c114e02b1d7fdc46e0b495cfc01c3
SHA1

0b810447828a36ce22d905c0a5ca8ce6f38700ba
SHA256

a4f78e77907d8ea06d93912ebc29d191629c47270d87882ed9e8948a3bbb77c2
SHA512

c5c30fdd8d2dbda2cfa1a10d56d7a7485cd0d565e49542fa6f9dd9c05ce2606feaef4855656ceab4e8f3bb60dd13f4fc564e6566ec23dcec8d8aca8d6b2d071c
SSDEEP

1536:6weoCsTr2cg+H32CP4Gr+D12uYew4spdA4GSuw1:l2R+RED1IKedv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
a4f78e77907d8ea06d93912ebc29d191629c47270d87882ed9e8948a3bbb77c2

Files

a4f78e77907d8ea06d93912ebc29d191629c47270d87882ed9e8948a3bbb77c2
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ