4b744cd40bf6bc5fcd4b69faca0c9d8424aee2d8f2f23c039d2d756ae38b0e1c | Triage

Sharing

General

Target

4b744cd40bf6bc5fcd4b69faca0c9d8424aee2d8f2f23c039d2d756ae38b0e1c
Size

810KB
MD5

e88d57eaef4ecc3204589fe80e130ff7
SHA1

f5c3072e8f58f5cebd14074df108baa43c2f5d50
SHA256

4b744cd40bf6bc5fcd4b69faca0c9d8424aee2d8f2f23c039d2d756ae38b0e1c
SHA512

40048b272d0211a90a519a84f2e04039592950356281af5bf977562ca854701b0049f03bc9e9e0e7eaa7b0c69e9b13f58331a4b8bf3a97625d8740649a0090dc
SSDEEP

12288:E+AMd6OdKEari+Vc3ldT/z7sn8528j/4S8u/BwnOn+AuRmuP2fMC4vgB2HdnPPRx:Ei6h1OKc3fbU85iI/K5HNUMC4vo29nn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b744cd40bf6bc5fcd4b69faca0c9d8424aee2d8f2f23c039d2d756ae38b0e1c

Files

4b744cd40bf6bc5fcd4b69faca0c9d8424aee2d8f2f23c039d2d756ae38b0e1c
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

oTuw.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 797KB - Virtual size: 797KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ