b4ff0b4410f52c99e1b6293a4e5042be3d298e49819de74b3a17846e9f74dd2a | Triage

Sharing

General

Target

b4ff0b4410f52c99e1b6293a4e5042be3d298e49819de74b3a17846e9f74dd2a
Size

853KB
MD5

7f5f67da37549f4ec9830d731496443e
SHA1

538dbda1bdf40ba5d14b4d1f6e67986c6711e8c6
SHA256

b4ff0b4410f52c99e1b6293a4e5042be3d298e49819de74b3a17846e9f74dd2a
SHA512

2a2364a2c379f0a55decfd5a3fcd1e0b155971dd01fb94e513c8448c455a064efe8ecd9d0ad36aa6f946f20229cef0b1024f69f7da1455ecb1c879757109b2a6
SSDEEP

12288:VMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V95k/sHK9r:VnsJ39LyjbJkQFMhmC+6GD9uGKt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4ff0b4410f52c99e1b6293a4e5042be3d298e49819de74b3a17846e9f74dd2a

Files

b4ff0b4410f52c99e1b6293a4e5042be3d298e49819de74b3a17846e9f74dd2a
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 615KB - Virtual size: 614KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ