4faf215c2b0117a552b85f4af0d0d8c5f051d8e266a5df56205e4f18cf8533c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4faf215c2b0117a552b85f4af0d0d8c5f051d8e266a5df56205e4f18cf8533c5
Size

1.8MB
MD5

fa1494d97d1900c8fb70b23bac4afb50
SHA1

8758eb36601015245fc5c282e6d93019bb205fd1
SHA256

4faf215c2b0117a552b85f4af0d0d8c5f051d8e266a5df56205e4f18cf8533c5
SHA512

161bb5bf265d8918445d6011ebe65ce3c1a942401c212ee4db6fd6a9f7d77dd42fc6aedf5fc1edd5f250ebea68a6fd9f0bfa2389ab1e5ad591de8fb0c31644f1
SSDEEP

49152:k75B7FDFXbvYa8aesY3Ot4N7G/IeUAtK:k75RFDxn0etD/INAt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4faf215c2b0117a552b85f4af0d0d8c5f051d8e266a5df56205e4f18cf8533c5

Files

4faf215c2b0117a552b85f4af0d0d8c5f051d8e266a5df56205e4f18cf8533c5
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 366KB - Virtual size: 366KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ