4cf96b49c1f2c222b0ab34d8db72465d8c9a1e3d16b74a2e52958fbb88338211 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cf96b49c1f2c222b0ab34d8db72465d8c9a1e3d16b74a2e52958fbb88338211
Size

124KB
MD5

40e308b2302b7fdbb1b09bdc3a1fcec3
SHA1

a369618b6b0e39f222b2eb3edaa8561c901544a6
SHA256

4cf96b49c1f2c222b0ab34d8db72465d8c9a1e3d16b74a2e52958fbb88338211
SHA512

94e0739ee5bdd6c9b2e1d4f48a16efb16f53bab2536e526913e923ac1bada013cab4bf42f20f7634a1312d68f16407a4150f7fbdecd3aae264b0d00c3a2b91d9
SSDEEP

3072:GYTKyNVb8Erk2R4r4NJyYvQhskrXKvwQqR:jVb8oZREEEYvm/HR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cf96b49c1f2c222b0ab34d8db72465d8c9a1e3d16b74a2e52958fbb88338211

Files

4cf96b49c1f2c222b0ab34d8db72465d8c9a1e3d16b74a2e52958fbb88338211
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 185.6MB - Virtual size: 185.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ