4fcd0c0f8d9b01768367672f33819d60N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fcd0c0f8d9b01768367672f33819d60N.exe
Size

2.6MB
MD5

4fcd0c0f8d9b01768367672f33819d60
SHA1

b0e91dc5cdc2c12d802d7980adbf99eedc1eb959
SHA256

3e46bc80b8b14034f3081117830093d101a7f806094f876d0b18c6643e581408
SHA512

e7fc040d0d0e5444f6ba5b5aefc3001e44b5d50a4c8600f923e88b455bfe651715b7cae40d41e14ce924266acf76d8bc277c06a421beef36be88a5c6d7c2aae6
SSDEEP

49152:esbayGMgTYGeiE0t6f2CvJtJnurnvBJes7w:esuyGMdGeir0OCvJtJnurnvBQn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fcd0c0f8d9b01768367672f33819d60N.exe

Files

4fcd0c0f8d9b01768367672f33819d60N.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 14KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 24B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 230KB - Virtual size: 230KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ