4018d51e9f121a834294529720d7303983600a2f1c5bc5257e83975db112da9f[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4018d51e9f121a834294529720d7303983600a2f1c5bc5257e83975db112da9f.exe
Size

18KB
MD5

e2e9b4b81eaa6b811aa13d38de4af216
SHA1

8893cfac11a4da1f4766ad9405d6902c2078b52b
SHA256

4018d51e9f121a834294529720d7303983600a2f1c5bc5257e83975db112da9f
SHA512

a0f37e5a74064cb268edc7c771891d4fa54a97219ba86d83d226ee01819f9776975dad99243e8a84a0f863cf5c8669828dcf437f61ea90da056b858e4ec7d0b1
SSDEEP

384:ZtkdWYBk0hOk0RJMJrwQiUnMNDK7oTlxSj28zRPWfWlvi7NX+:cdm0jKJM6UnEK7oT6C7elyR+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4018d51e9f121a834294529720d7303983600a2f1c5bc5257e83975db112da9f.exe

Files

4018d51e9f121a834294529720d7303983600a2f1c5bc5257e83975db112da9f.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ