4945db6736b473c27d1a16ba63270850faedc25f55524bc4056e32b66984c713 | Triage

Sharing

General

Target

4945db6736b473c27d1a16ba63270850faedc25f55524bc4056e32b66984c713
Size

136KB
MD5

8e05a6888bf06d3871706ba464225655
SHA1

05eb2c985771dfe6465ccddd3ab0cb4d28b0546b
SHA256

4945db6736b473c27d1a16ba63270850faedc25f55524bc4056e32b66984c713
SHA512

592e9e9db25f5f55005f0141fe92966e9d216c06591ea4da8fb3cde19ce92e652c10e45732acf27032f5a3fa52bfcacdb4cda9cf052639f3fb150311555e82d2
SSDEEP

3072:9pF9a8DsI/nydIRDE2/hmxQWj+rTRhUUhFiY:9X/nyEDE2Jmx5j+rd7Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4945db6736b473c27d1a16ba63270850faedc25f55524bc4056e32b66984c713

Files

4945db6736b473c27d1a16ba63270850faedc25f55524bc4056e32b66984c713
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 559KB - Virtual size: 558KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ