4fefcf62a0e354c6fa8a3eebfdff8ac4b107a16452ef95fdd18f6b82daeee0bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fefcf62a0e354c6fa8a3eebfdff8ac4b107a16452ef95fdd18f6b82daeee0bb
Size

4.1MB
MD5

bbe86d250c559f1cc2ecb31275cf2f12
SHA1

f5004dfc53f2d1b22b89560ac84b01200f06a8ce
SHA256

4fefcf62a0e354c6fa8a3eebfdff8ac4b107a16452ef95fdd18f6b82daeee0bb
SHA512

fdc32f68ed47c198d8e855f688dd5e0821310193555787af75326ef7ab20f3f9c67557caee8ce294a0d42049d82b0a69b610bdc3d24b9106b1aafcff7112d7bc
SSDEEP

98304:NkKtLxF8BvNjVj8RFll4T2jXWraz3/gLUDrpiXLJviqCo3AjMvTXm/ndRq7:5FgljmRFluEWrCPTsXEo3WqTXm/n3q7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fefcf62a0e354c6fa8a3eebfdff8ac4b107a16452ef95fdd18f6b82daeee0bb

Files

4fefcf62a0e354c6fa8a3eebfdff8ac4b107a16452ef95fdd18f6b82daeee0bb
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ