4b264ce92aaccb50efcc515b50c78280N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b264ce92aaccb50efcc515b50c78280N.exe
Size

3.0MB
MD5

4b264ce92aaccb50efcc515b50c78280
SHA1

08b9f87d64fcb6d7163d2dbde31b6ad736ade154
SHA256

133b4ac05584f9724a856ea739bea76ea1fe9f8dcf1b7542bae1ae9b2505d17a
SHA512

1d4ca411bd150e94827900fe503e43c019bd090997f41ee6fcbb254951214fd05a0a7b4dce52a48e3ec0590d8f9acc6656877abff1538205f1cca5bb058bf335
SSDEEP

49152:kWlW8I/4MnYYJ2ZhqSGLHkJEMwxz9IiIqmDta45Dzxg:3pIDQUCpDFg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b264ce92aaccb50efcc515b50c78280N.exe

Files

4b264ce92aaccb50efcc515b50c78280N.exe
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.extrel
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dbgmap
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.il
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ