4b1c6ffcfbec78b82623868cfe8d5a08a3aafe9430dd4562cd6ba16399647758 | Triage

Sharing

General

Target

4b1c6ffcfbec78b82623868cfe8d5a08a3aafe9430dd4562cd6ba16399647758
Size

531KB
MD5

ee3e4877fa578a2d3cfda6750b2c5d54
SHA1

a0be3816801910f456a4b15f9b1aebaf80f9e2e9
SHA256

4b1c6ffcfbec78b82623868cfe8d5a08a3aafe9430dd4562cd6ba16399647758
SHA512

c420522aa30423f12a8f94b9ae12854b389abea23d0c2a818bd10e4b4b876f3fa5e65dec883cc6e2fc05f56f2746fced0520af48df30847cf16d0ba92c87fb54
SSDEEP

12288:KK99+nc+7/0GL5GLiQ6e3V511XnBu28QzqTkNM8yF:+ncY8GL4L36e/19BufQ22yF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/U prilogu je predracun.exe

Files

4b1c6ffcfbec78b82623868cfe8d5a08a3aafe9430dd4562cd6ba16399647758
.zip
U prilogu je predracun.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

yNrh.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 574KB - Virtual size: 574KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ