04f856e52a275f7a6ac9ec57cc3ee94ae12fb202551a3ac21df3207019e90be2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04f856e52a275f7a6ac9ec57cc3ee94ae12fb202551a3ac21df3207019e90be2
Size

12KB
MD5

2867dd13f71634acad17d4bad1c601ac
SHA1

cee3f05b535ce319e936692df00f306f38fd0bb5
SHA256

04f856e52a275f7a6ac9ec57cc3ee94ae12fb202551a3ac21df3207019e90be2
SHA512

4d7e6db407d87a656625f7ad6d6a9e96f5fafa425ddfaf211ae96b19c32bd6545b5bcab5db99bb78b82104fe3d3ed19477a566b6dcab2a399d596bbc3974e928
SSDEEP

192:OHUWPx5pP9ShA329rpx7Fgq1kvMvtNnWZof:OHUWJ5pPcc29rDaq11j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04f856e52a275f7a6ac9ec57cc3ee94ae12fb202551a3ac21df3207019e90be2

Files

04f856e52a275f7a6ac9ec57cc3ee94ae12fb202551a3ac21df3207019e90be2
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ