4f443639ee595d3af6e5e9688d11f7b31f51cb5856814d31180c5e6f57d9418a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f443639ee595d3af6e5e9688d11f7b31f51cb5856814d31180c5e6f57d9418a
Size

112KB
MD5

4d89127ed6ca4e7794f0965f4059de82
SHA1

81808f6f3c4abb5e6dba7daccb25ed1d67f60cb7
SHA256

4f443639ee595d3af6e5e9688d11f7b31f51cb5856814d31180c5e6f57d9418a
SHA512

4a4301a366105d32668bd8c7aaa40f766ed36481dc07586f5c1a73ee9c2d47d846e575646f56ca02bb845b1cfb513849d09a3144e582219850ebe7a8c5448655
SSDEEP

1536:h5NXDBcxXeNrsSWpxgnPn3FlvodfWz9KdNmrWzgB8Qq8PxV:h5NkerWbgnPn3FNoWgdNn3Qx3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f443639ee595d3af6e5e9688d11f7b31f51cb5856814d31180c5e6f57d9418a

Files

4f443639ee595d3af6e5e9688d11f7b31f51cb5856814d31180c5e6f57d9418a
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Windows\Temp\drone-cbA6LaXGvGFtweiN\drone\src\Common\Lavasoft.Search\obj\Debug\FeatureMainComponent.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ