620bfd3b16e7ca69291b6501d2d1305d4d55658f60d9b9dcb5625023e6610ec0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

620bfd3b16e7ca69291b6501d2d1305d4d55658f60d9b9dcb5625023e6610ec0
Size

1.4MB
MD5

2526752ce744d7cd08ced1a16b4db468
SHA1

ccb813c23575152bca73db0a36f54a9f60099d17
SHA256

620bfd3b16e7ca69291b6501d2d1305d4d55658f60d9b9dcb5625023e6610ec0
SHA512

cf8fd79adf36a8644ec73178737811c3253a70d776e056fddd0e3d855be804d3bd9ce175764f2c83008c81ebaa38a2eed3cb0561cd3311c7ac9a59609091ab1d
SSDEEP

24576:6aYj4GfaLVLOp0qlHymZy8rF/ttTDR2bQuH5VCg/6BgIwOsXPwSkXH0/1qHkHged:6lXyYH52bhVR/UgIwwE/QHrItB/B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
620bfd3b16e7ca69291b6501d2d1305d4d55658f60d9b9dcb5625023e6610ec0

Files

620bfd3b16e7ca69291b6501d2d1305d4d55658f60d9b9dcb5625023e6610ec0
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 338KB - Virtual size: 337KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 893KB - Virtual size: 941KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 239KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE