4d4b10c5a8aca68d53a5229d01e9f18713e987ea073e09a4429da4d4c576f12c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d4b10c5a8aca68d53a5229d01e9f18713e987ea073e09a4429da4d4c576f12c
Size

676KB
MD5

3aab6fb08205202eadc383e9da5efcf0
SHA1

84058f2ef9a385464b9f6ec7142e50b7fedd6d55
SHA256

4d4b10c5a8aca68d53a5229d01e9f18713e987ea073e09a4429da4d4c576f12c
SHA512

a2fd24ea88e2bbbb4e24eecbb54384b00f343b3046733aa1b6ca3a09f70bd5cecba2b274cbc924de4a3c8f412e496eec0eef31a380c5e4a38a1aba94588bdfc7
SSDEEP

12288:zZ72zCpb/bA1NUQWgfPE4WaCgafjlIEh/JqG4oH6Jea20HecgfagYwZVQiWdw:N72Ib/IUfBDaHIjlVlJGoa9ec/gYwHQw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Gloves Specifications-181128docx.pif

Files

4d4b10c5a8aca68d53a5229d01e9f18713e987ea073e09a4429da4d4c576f12c
.zip
Gloves Specifications-181128docx.pif
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

cPvB.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 688KB - Virtual size: 687KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ