4ca2ada3d0be8c1002bfc08b1439529abeec9fb22a3f63bd49aeee9228484f4fN[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ca2ada3d0be8c1002bfc08b1439529abeec9fb22a3f63bd49aeee9228484f4fN.exe
Size

223KB
MD5

707b34f494d9f369c1b61834d87f1f70
SHA1

15fd97fdf00627ced54bf287c5b098597b200e20
SHA256

4ca2ada3d0be8c1002bfc08b1439529abeec9fb22a3f63bd49aeee9228484f4f
SHA512

e55a79d0116e43f7531a4d401026892c52619506292606f30151e3e03d08608592f9a61defb1de37acbde078f8567fb856788d7a055d32fec71833fd1a3693c4
SSDEEP

3072:Fr1jQY+8KEYZmy3LOQ3hHbhq0/Dm9AfRUQv989Dr5HSOnkZsig8g:Ovh7h5EAJUB9DrN/Eg8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ca2ada3d0be8c1002bfc08b1439529abeec9fb22a3f63bd49aeee9228484f4fN.exe

Files

4ca2ada3d0be8c1002bfc08b1439529abeec9fb22a3f63bd49aeee9228484f4fN.exe
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wmlaunch.pdb

Sections

.text
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.yvs
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE