4fa0565d937ae885d2e8f6ceb8c04340N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fa0565d937ae885d2e8f6ceb8c04340N.exe
Size

610KB
MD5

4fa0565d937ae885d2e8f6ceb8c04340
SHA1

ec0134293225c004097b3bb6bebc6b5eb56afd91
SHA256

ef30f08dea0d79dc2ccbaf3a042d8f100804da831e295271a06a8577285529f2
SHA512

2c68a23f3dfebbdaf1ce15fab74de1c8805834d2d1124b7de1637e0cc85f0fcf195e9758a3e9991773b1a58c34ea1c85408b20a71c131ecbf433ecade486fe3c
SSDEEP

12288:xAcnrFxyT8tL/odJ0WrYqgNEIrEkoNk7L6zSZp:Nnrv/odmWMrRoNk7BZp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fa0565d937ae885d2e8f6ceb8c04340N.exe

Files

4fa0565d937ae885d2e8f6ceb8c04340N.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 294KB - Virtual size: 294KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ