fdca00e3c56b15eda992ba0a43f758514216f53f7e1cb83fd100c57fcb70fcf9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdca00e3c56b15eda992ba0a43f758514216f53f7e1cb83fd100c57fcb70fcf9
Size

2.3MB
MD5

8b18883007744833a9c19047fe34e07d
SHA1

50d8d5f68313a513c7ff4e3307ac4f8a06fd3b72
SHA256

fdca00e3c56b15eda992ba0a43f758514216f53f7e1cb83fd100c57fcb70fcf9
SHA512

74f7da1fcd9ad0bc066705ec6fcdab4d52c07b4d93fa4000c5844d0ba7d12c93de1a5004b6f605eaa1f0d56a8bc415021585606638d550594b7ba2a6fcb7e42f
SSDEEP

24576:sXCIZEaeWq5mCSsGgLWEi2Q6mtV3QpH0HlDih5bU+wF2ZoicmLZ086V4WFoSmi1V:29ZwBHo+giPZ0d5wgkPm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdca00e3c56b15eda992ba0a43f758514216f53f7e1cb83fd100c57fcb70fcf9

Files

fdca00e3c56b15eda992ba0a43f758514216f53f7e1cb83fd100c57fcb70fcf9
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ