bba42d1777140500134bdd772a5864fcc88e4d1853f9b2e5a1334b13f4e92d52 | Triage

Sharing

General

Target

bba42d1777140500134bdd772a5864fcc88e4d1853f9b2e5a1334b13f4e92d52
Size

2.7MB
MD5

f18d13c1505a6117420e44d62f750361
SHA1

928d78089033fe097430c544ed7c4e335ff5eee0
SHA256

bba42d1777140500134bdd772a5864fcc88e4d1853f9b2e5a1334b13f4e92d52
SHA512

8a61b2b249dd0fdac6f8d0cacb41bf19ef394cfaa3ef4c5b1ea84cbdcde6d5dd0a5c44705d47d4875989dd6dfbbedcf9cd3f321f64559785a349fedc48f9d6a1
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlAlopz1H2LVB/ep:Q+8X9G3vP3AMulMz1H2LP/ep

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bba42d1777140500134bdd772a5864fcc88e4d1853f9b2e5a1334b13f4e92d52

Files

bba42d1777140500134bdd772a5864fcc88e4d1853f9b2e5a1334b13f4e92d52
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 994KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ