af4cfaf156a180da0fe9aee456283986eedd7f208813bc86da142d93c1760936 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af4cfaf156a180da0fe9aee456283986eedd7f208813bc86da142d93c1760936
Size

1006KB
MD5

30907863a8d4cd8a7ca5af595ea50037
SHA1

dd7100ff5f16755e8ae3f5f0974766816f76a362
SHA256

af4cfaf156a180da0fe9aee456283986eedd7f208813bc86da142d93c1760936
SHA512

98a0425aa7d132cfc0b13d8942d7b26a89bcb58a2a264dfbd2763f70423f8adf82f5ce41a0552dc931eba19bc7a423bf8d811d308aa21e39d1344d99676d39f8
SSDEEP

12288:3RUsMWw+NCWGT527nUJp7WD3jr52dcr70XSqeiN3PTBiJZ3YznR0uKC5jjAbF:B+B4CWB7U+DBycrmSqeiZTkGmqoh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af4cfaf156a180da0fe9aee456283986eedd7f208813bc86da142d93c1760936

Files

af4cfaf156a180da0fe9aee456283986eedd7f208813bc86da142d93c1760936
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 512KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 445KB - Virtual size: 445KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ