2181fb1b7bc97013c39d35cbb4998041dcef4b11dcfdd7aaef3754da33019f1a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2181fb1b7bc97013c39d35cbb4998041dcef4b11dcfdd7aaef3754da33019f1a
Size

4.9MB
MD5

a091d6e4fe6545e2746e275ae96df6b6
SHA1

6b2aced88a14b43afbae737c66e74ff78db16edb
SHA256

2181fb1b7bc97013c39d35cbb4998041dcef4b11dcfdd7aaef3754da33019f1a
SHA512

0bbc2053f42bc749dbfa2168c9d9699b65bdb7fa3ed41a8ec5351452d2cc3e93638d800561676f56bc7d27a2a05b2e5e345bbd647f2e572b8b9b728d8529cdae
SSDEEP

49152:9JLVac3GEq3qvMNmNxgavNZGJQaoJ4iSMLCybOak6nI4dPg0KM0ZkVZoX:r3U6vMoxgaLnak4HMGOnk6LPg0KRkVC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2181fb1b7bc97013c39d35cbb4998041dcef4b11dcfdd7aaef3754da33019f1a

Files

2181fb1b7bc97013c39d35cbb4998041dcef4b11dcfdd7aaef3754da33019f1a
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

_Start@12

Sections

.text
Size: - Virtual size: 654KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.upx0
Size: - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.upx1
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 425KB - Virtual size: 425KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ