b4240d50d97ce96af35ab6527c2558bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4240d50d97ce96af35ab6527c2558bb
Size

79KB
MD5

b4240d50d97ce96af35ab6527c2558bb
SHA1

63d33027de12789c32b88d1daa9bbdcb3ee9ced3
SHA256

0f9449608bc6717bb4e07ccb87ab2f92b80b0990c933b996811e620a837321fb
SHA512

103db3790de2041f503d8cf66d76d45d508a76b39a8b9529eb1b5cc46ab3b4c4514ffbca8e6de819f4aa557e78589db518dfc7c7b7712560ee4a2a0fb2398ede
SSDEEP

768:eUM/zX1vqX1vLFB5W5pYJIJDYJIJOO6Of:rIWe+eoO6Of

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4240d50d97ce96af35ab6527c2558bb

Files

b4240d50d97ce96af35ab6527c2558bb
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ