4ecf642efaacb2436c6c50d67b4c13b412223e03c288318b6dbd06f3f142cf59 | Triage

Sharing

General

Target

4ecf642efaacb2436c6c50d67b4c13b412223e03c288318b6dbd06f3f142cf59
Size

112KB
MD5

66dc5e2f50b0127d751a38e7ee662559
SHA1

3df32baf65a27c3e2be0913bf695cc9fabcd21ae
SHA256

4ecf642efaacb2436c6c50d67b4c13b412223e03c288318b6dbd06f3f142cf59
SHA512

52ae840cd96a4e47f20567d0e3ab0bd747ba59b04f52c3c738bf87a0f48b83464eb9a449640de2ad680bd6f64c58a922d64e5a62de81945e262751a54d28fcd1
SSDEEP

1536:orp5eznKUlIOp3YjVCguHEvQEbFqVC3woFRKpT4xtKegoxmOBh73r:w5eznsjsguGDFqGx8egoxmO3rr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ecf642efaacb2436c6c50d67b4c13b412223e03c288318b6dbd06f3f142cf59

Files

4ecf642efaacb2436c6c50d67b4c13b412223e03c288318b6dbd06f3f142cf59
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.l2
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ