04c2edcf668418b182f0b44359d1c2c24dc5a49d10649bd49b6abb70ee274303 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04c2edcf668418b182f0b44359d1c2c24dc5a49d10649bd49b6abb70ee274303
Size

16KB
MD5

1a4818001bb483a763c3253eb02606c0
SHA1

8c9d900718a813d074775a5543617d9ddf1b5990
SHA256

04c2edcf668418b182f0b44359d1c2c24dc5a49d10649bd49b6abb70ee274303
SHA512

f17db7f6c0dd3ec188c3b2df172072b5f17857db5d32d8bafe5124b4dab4ebdee2f08288fadfcadc55dcab3b3f23251872750b88aad91376148ffa28186561fa
SSDEEP

192:KBZvMG3Wce19xjJRjjJD/SC4eMG3Wce19xjJRjjJD/SC4Nolnnd+Dzlnnd+DxDSa:mK0UolnnczlnncZ4Qfxd4QfxSbC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04c2edcf668418b182f0b44359d1c2c24dc5a49d10649bd49b6abb70ee274303

Files

04c2edcf668418b182f0b44359d1c2c24dc5a49d10649bd49b6abb70ee274303
.exe windows:10 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 284KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ