2704688453cdda8d027ec9669e94be90108e814c97934726f9a51f1c98f9bcd9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2704688453cdda8d027ec9669e94be90108e814c97934726f9a51f1c98f9bcd9
Size

3.4MB
MD5

4ae0e77bc9397da3dae1247fa885575d
SHA1

b0e5a5d99ac935411f26f22eed0995abbf49600b
SHA256

2704688453cdda8d027ec9669e94be90108e814c97934726f9a51f1c98f9bcd9
SHA512

e3196b1762fc9e9c5d747564a8d2e0c184c934ff1ee13b8c64c1d25f765a1b63faf53e650e8736e8ffadc5ae61af73961c5e2f4eda491158ccd2f552016225dd
SSDEEP

49152:aU9H5ltSFRLOTTManHFr9WTXvtsPNg1UhvAKReBKTk:au5ltSjLOTTrlrQbtsPNg1UhvcU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2704688453cdda8d027ec9669e94be90108e814c97934726f9a51f1c98f9bcd9

Files

2704688453cdda8d027ec9669e94be90108e814c97934726f9a51f1c98f9bcd9
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 57KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 28B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 665KB - Virtual size: 700KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ