4fbea9806312eece3dd8523cf6c9509cedda1abe14fdc55bf793606dffe6c053 | Triage

Sharing

General

Target

4fbea9806312eece3dd8523cf6c9509cedda1abe14fdc55bf793606dffe6c053
Size

277KB
MD5

22a231b758870d819a1169a9744a0805
SHA1

5a175eff3e50d5108f9d859b57c5be276a23ac53
SHA256

4fbea9806312eece3dd8523cf6c9509cedda1abe14fdc55bf793606dffe6c053
SHA512

447d2ca8eab182c29c380ddf7ba66bbb5c9ad86edd113d0771e3290146c3a187e95e4931f1ef2b89b2bddd79f42813ea8f47ef643a0ad93f8643e0ae05815ef7
SSDEEP

6144:K6fjKlLXlCLVH30qRECXqo+5MuUgYXNV+d:1LK1XkLVHxGo+egYX6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fbea9806312eece3dd8523cf6c9509cedda1abe14fdc55bf793606dffe6c053

Files

4fbea9806312eece3dd8523cf6c9509cedda1abe14fdc55bf793606dffe6c053
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 272KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ