b4f263e0fa95a584699ab82da668f461 | Triage

Sharing

General

Target

b4f263e0fa95a584699ab82da668f461
Size

195KB
MD5

b4f263e0fa95a584699ab82da668f461
SHA1

ec122384a2183fd11bdbd25d26ddb87438f9402c
SHA256

9a9781ee1f7842c31a45f4a5ef19a22754a98035e851be1d2e2baa984bf9553b
SHA512

298e02a1986f53ee770a7fea2f45aa1cebee8d12afaab87ab9167355259088546315062a504680b1a815277e64bd0132a7880652afc74aed508e20bdc2fe1e62
SSDEEP

3072:IWpNZwzdnAhN2a57Rnnnnnnnnnnnnnnex:TpfUu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4f263e0fa95a584699ab82da668f461

Files

b4f263e0fa95a584699ab82da668f461
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.conf
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nah
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE