b4a698ebdf4225fe62b22917e607265c | Triage

Sharing

General

Target

b4a698ebdf4225fe62b22917e607265c
Size

583KB
MD5

b4a698ebdf4225fe62b22917e607265c
SHA1

641fd9ee715c2777b2b7d9bfd3657c41fbf2e9d0
SHA256

1c50f00eacf16bc5c4f77c97910e56391a29a532a95bcaf7d8910563f30f2676
SHA512

6ab02418b1cd39db60da1985ca5e69c7b77f1897a6546f18ca2157b1d440c1497cd7550e652d95b83745a91d7131a7a72f8bc1df917947be61e8ee32c66c9588
SSDEEP

12288:+FNEGdAYnaj+S1OlEjUdNAgv4M5b4bIzdsTX0ET+znl2Z59Pqd:1AAYn8xiEjUdOgvHbGIzdsTXZO6E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4a698ebdf4225fe62b22917e607265c

Files

b4a698ebdf4225fe62b22917e607265c
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 383KB - Virtual size: 382KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 4080.0MB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 52B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ