94cca21c60c95ec0b3c6697a8d9bcf8f0ef9dceaad86e6ed1cc40b77c632ad33 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94cca21c60c95ec0b3c6697a8d9bcf8f0ef9dceaad86e6ed1cc40b77c632ad33
Size

4.9MB
MD5

ac72506b5b4a37368ab50b0c0d6db890
SHA1

46d884eb64c8217190dc3d0825f8090d511d0112
SHA256

94cca21c60c95ec0b3c6697a8d9bcf8f0ef9dceaad86e6ed1cc40b77c632ad33
SHA512

124abe50c81694e760064e5779e08cf87be06ed17a068b06aa266180996362b8b5795f2f3695bac02c24aeddf6caed97e4d7b226c1d3395e7e5f0561ff2582af
SSDEEP

98304:QgSLRu/2nMZnVd3z/oB7chdDsSX2ut3YprEYEoeGx:Q5L/inV5i0D9o4PGx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94cca21c60c95ec0b3c6697a8d9bcf8f0ef9dceaad86e6ed1cc40b77c632ad33

Files

94cca21c60c95ec0b3c6697a8d9bcf8f0ef9dceaad86e6ed1cc40b77c632ad33
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 352KB - Virtual size: 696KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 732KB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 44KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 32KB - Virtual size: 427KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.winlice
Size: - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ