4[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4.exe
Size

792KB
MD5

84c032bd2c199ec3b9190a3ba3a79688
SHA1

e1e517d689d06c48f592a7f212fba3767f6ea7fb
SHA256

418f0f099c70fa88460becd3b8d10992f68dacf4dba44370abdde90292d508d6
SHA512

d24fab599016884c180e831030d51dc3639d0534ccbe50712e3ee569683bc9db519a5bc80c063f849a1838ca15dec679e41c07257cc9aaf5460a193c7515628a
SSDEEP

24576:pyMtlKi5sGLp4kdK16fgSZE+iKtkVrWW:dt4GWk016fgN+pkdW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4.exe

Files

4.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 781KB - Virtual size: 780KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ