file | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file
Size

2.5MB
MD5

24edccf341c5a06a1d6c8ff386003b4f
SHA1

ecfd00a88908148063be4a560832eaec60f778f9
SHA256

477006ea2705b58613ca7d69c6b0870b1a004f9ba76b54bea7d19453e06abd41
SHA512

d5fa58b1bcd32fa70b2b02e4b3baa1411994635d17970262319980ca7ee7a9ba7750c77b41cfcee0db9497e8768c71bed83a51ed761e40ab76f301b52d45e820
SSDEEP

24576:tv+b+TWHh6VZVuAY7gLszIiAGYJRxdHdq/U2uWsrpem9UMRZ7T:tWqTPuM/JRxdHd5Frpem9UMRZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file

Files

file
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ