4cdd3b287cd5f29f2508c5a47e86cefddb4905e97bb37ac55313a0b0e35bad49 | Triage

Sharing

General

Target

4cdd3b287cd5f29f2508c5a47e86cefddb4905e97bb37ac55313a0b0e35bad49
Size

413KB
MD5

caa7c1408391f620f1eb3558b8bbf5a7
SHA1

33dc41b58dad55989b43ad7ced88b9d55a218ecf
SHA256

4cdd3b287cd5f29f2508c5a47e86cefddb4905e97bb37ac55313a0b0e35bad49
SHA512

f4f2504e72d7aefa464c5cfe957e02d148b4aacd47701cd33c4d4ed9a7a2059556965420eddaf94082bc71ad9ae06537cd3b6acae3e8b1868ce2247619ecafbc
SSDEEP

12288:TsfUHAGQ+qT0oCJpEwaf5HsrvgkBFsB1W:TY+WCJKwoRsW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cdd3b287cd5f29f2508c5a47e86cefddb4905e97bb37ac55313a0b0e35bad49

Files

4cdd3b287cd5f29f2508c5a47e86cefddb4905e97bb37ac55313a0b0e35bad49
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 411KB - Virtual size: 411KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ