b4646556ed03a14e14c5fa0fa942a0e6d74f529e8d7adba369049d03749cd0bd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4646556ed03a14e14c5fa0fa942a0e6d74f529e8d7adba369049d03749cd0bd
Size

333KB
MD5

1763a1e3fc23e4e374effe0dd48a0f30
SHA1

9be8c3514e77ecd2b9b4fe409b2c4689e92d1874
SHA256

b4646556ed03a14e14c5fa0fa942a0e6d74f529e8d7adba369049d03749cd0bd
SHA512

f72af0514c662137ff4409cac73ac7c86a2f3ba50012615bbe6dfaac1a6db7c2d7521b5f1d3d95aa731dad0a8701edca33fecec3c78445b1ecae0dde7a8629cf
SSDEEP

6144:Uc6v5blVduf0W5xrBMlTxfhR3yPmW9l5t3krJps12aQfSoL5yOFCcsbvEnWIWtI5:URRZVdu0YIxnOh9tp12aQaoL57sbvEnf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4646556ed03a14e14c5fa0fa942a0e6d74f529e8d7adba369049d03749cd0bd

Files

b4646556ed03a14e14c5fa0fa942a0e6d74f529e8d7adba369049d03749cd0bd
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

]A3U?\
Size: 289KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ