f4a87557940615dadde73505f32e2580N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4a87557940615dadde73505f32e2580N.exe
Size

3KB
MD5

f4a87557940615dadde73505f32e2580
SHA1

923d49081364b4a65e860d124dddec5f45f38c38
SHA256

1c56ac711ecc0baa4a4a2533afaf594a2e90a83a5a3b4c31e495d178559658ae
SHA512

ce034079f364e78c755c73a2b8efc2c3254d0c64f60e7b3de9b12a2e24c3d604888bb6f5f4c4443f16ec18ac2c9c20b88f9ffda0ebf6ccfaab3a84dfe8537d41

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4a87557940615dadde73505f32e2580N.exe

Files

f4a87557940615dadde73505f32e2580N.exe
.dll windows:4 windows x86 arch:x86

24a9d698157614300b4f12a31e0a92f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

crtdll

memset

kernel32

HeapCreate
HeapDestroy
ExitProcess
GetModuleHandleA

Sections

.code
Size: 512B - Virtual size: 143B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 30B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ