4a40aa050c0b06897f80417847738d0a561c78c072ca7c27ca0013bde26da33e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a40aa050c0b06897f80417847738d0a561c78c072ca7c27ca0013bde26da33e
Size

4.5MB
MD5

816a60209fb68bc0929b15f3682d531e
SHA1

1fa75d9c7b6fcb8d0c3afa89a8fad94e2839ea2c
SHA256

4a40aa050c0b06897f80417847738d0a561c78c072ca7c27ca0013bde26da33e
SHA512

5e67b81b5bc77ce151827ee8923e2ce0063a9df994644f23a1b371bc98caffaa3b61508631a9e5104c84abfc3ba411217f8638a33bd850da4d662697c441e9a8
SSDEEP

98304:m7X8sn8yeoTWZKmlkdOB9x8OHQF+QCLsBUsKu2kM5JVCGE+/SwkZ:YX8snhelKYkkjxBHQ1CLEUsh2P/pT/Sb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a40aa050c0b06897f80417847738d0a561c78c072ca7c27ca0013bde26da33e

Files

4a40aa050c0b06897f80417847738d0a561c78c072ca7c27ca0013bde26da33e
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ