b4f96627e1e052376391acae30306650N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4f96627e1e052376391acae30306650N.exe
Size

67KB
MD5

b4f96627e1e052376391acae30306650
SHA1

0d3db7ad5abd4d2ab54474d316d40c9fc7f2c5e6
SHA256

d9d1fddd011ceb8696babf3e96855085f41911b917d8994a0e11596403892361
SHA512

f63082d20e23e9faef6dc55203c9a12e629823a6d9a0a83b633dede1f39984269c1d8883e0e434bac1d85dbcfd14bb176671b70c00333b8b9909e4e9a5ffb6ed
SSDEEP

1536:Q+V/E5BF+b5kGyDPcQMvCCERyY+1RQ0R/Rj:65YrQaddpe0Vx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4f96627e1e052376391acae30306650N.exe

Files

b4f96627e1e052376391acae30306650N.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ajelhf
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ