2979b0f5d54b52f88cf9dbdb7c96a0596c010a157db91fd6d957631b263f8dd1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2979b0f5d54b52f88cf9dbdb7c96a0596c010a157db91fd6d957631b263f8dd1
Size

1.6MB
MD5

ebf118c81157b2979da3e57556c96962
SHA1

7b186ca4c078000d21935163d81322da3dda4eff
SHA256

2979b0f5d54b52f88cf9dbdb7c96a0596c010a157db91fd6d957631b263f8dd1
SHA512

c146fa04f1c2408f987d7133c8ff5d7718bd14101db1489fcc9e7627b52cb9eb648d9a212fcdd29087634f562e84c88b3c00b21322441c9b33b5c7c97e7b5d31
SSDEEP

49152:86dijulWeOVxY9ezCsyME7SFytoWQVugD+TrUBjuCt:bdiulWXq9eWsHoECoNVtDirC9t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2979b0f5d54b52f88cf9dbdb7c96a0596c010a157db91fd6d957631b263f8dd1

Files

2979b0f5d54b52f88cf9dbdb7c96a0596c010a157db91fd6d957631b263f8dd1
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ