4b0cf4d18536f7a36c8a585ea3feb7d904240db2222c8293c09a80627d71645e | Triage

Sharing

General

Target

4b0cf4d18536f7a36c8a585ea3feb7d904240db2222c8293c09a80627d71645e
Size

698KB
MD5

65dbd5487a7eef0a251b6ffcb98fd121
SHA1

0abde7b97bde7a4891e09d703b4a9574571c4c2e
SHA256

4b0cf4d18536f7a36c8a585ea3feb7d904240db2222c8293c09a80627d71645e
SHA512

aa2f66f419593e2d4220e472aa9f4ebbdedf800e32f61cc6935af6fba5a9fe36ead42866764bc5f45536983f6277f93e4b99663f38e85b12d77eddbd33a168ca
SSDEEP

12288:hqpDpKD3QH5pwMwktr5NE+yHko71f6hIehY876GMNlUjk6BeMXEvI57oZrjws9B:45UbEtrHgH31GI67WB6cM0v4UdjrB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b0cf4d18536f7a36c8a585ea3feb7d904240db2222c8293c09a80627d71645e

Files

4b0cf4d18536f7a36c8a585ea3feb7d904240db2222c8293c09a80627d71645e
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BSS
Size: 81KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 108KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 298KB - Virtual size: 494KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 950B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ