a4933bfc4cdc72fe0b685d5a59a3d1b162fe61ac809d79abcc472db5f3c8be39 | Triage

Sharing

General

Target

a4933bfc4cdc72fe0b685d5a59a3d1b162fe61ac809d79abcc472db5f3c8be39
Size

320KB
MD5

874baf341969ec6f930981be16cf7660
SHA1

21be42637c96fec907c62e14045f61737f4c86be
SHA256

a4933bfc4cdc72fe0b685d5a59a3d1b162fe61ac809d79abcc472db5f3c8be39
SHA512

9de0f2b248702ead6283d8e92dde60183ef7753f25606badb9fbba1e3f6a7f8eb1eac352179bc45825ad9c5e1e40b66d7c578437e442f4fc8b44d8431637a0a2
SSDEEP

6144:8o2RfS1556NXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:8o2EB6NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
a4933bfc4cdc72fe0b685d5a59a3d1b162fe61ac809d79abcc472db5f3c8be39

Files

a4933bfc4cdc72fe0b685d5a59a3d1b162fe61ac809d79abcc472db5f3c8be39
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE