4c7a91ec0e3a9fd031a1183d60e3f350[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c7a91ec0e3a9fd031a1183d60e3f350.exe
Size

140KB
MD5

4c7a91ec0e3a9fd031a1183d60e3f350
SHA1

136278b8344f24293b0279498f0b877ec3c7acc9
SHA256

a5b31371064e17c1fa614d881cbac3b8543cb48a29a88d776d534d159ff66d45
SHA512

e52da015e860832a6fc29cad6fdf641660be377c7a16965daf10c5823e0beac240af277870b7c2bcdfb2fa64088e4513a2230807832aad99307a863d063075b7
SSDEEP

3072:MdlNUsf/X+8mdujN/zYtjmDHDzRpIhq+KjQfULCEy:MDO8OcnshQcUOZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c7a91ec0e3a9fd031a1183d60e3f350.exe

Files

4c7a91ec0e3a9fd031a1183d60e3f350.exe
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

GPBExecutePack

Sections

CODE
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 13KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ