b7a764303f5ac957a2c18c771fd45d8574a2ea976ca19e6febb1e05eabc37cea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7a764303f5ac957a2c18c771fd45d8574a2ea976ca19e6febb1e05eabc37cea
Size

4.2MB
MD5

647e8c39a8a66c95d58320290b25e74d
SHA1

19befabd74f54fc55d6a7548f430e2558eb8956c
SHA256

b7a764303f5ac957a2c18c771fd45d8574a2ea976ca19e6febb1e05eabc37cea
SHA512

7b726f614f7c81046701b3224f3edf83cb135e32e4a6b8fb836ee1d1d67be4e2d05a340bdcdff5f03fd1413e550772218e518c04237966205eb77f064791d6b4
SSDEEP

49152:CVD6+Ty45rytA473nwtUxtTIAfdD1t4Y34zgov3C1Bmr+C9iuhXf1VDyK:eGcctA8Fht4Y349vS1I+Cdrj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7a764303f5ac957a2c18c771fd45d8574a2ea976ca19e6febb1e05eabc37cea

Files

b7a764303f5ac957a2c18c771fd45d8574a2ea976ca19e6febb1e05eabc37cea
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 279KB - Virtual size: 517KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 174KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 21KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 157KB - Virtual size: 401KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.imports
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 384KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.winlice
Size: - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ