f254ebcea22a41045691839cf33decbefb3c23805bad788e72fd78f0a1721b85 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f254ebcea22a41045691839cf33decbefb3c23805bad788e72fd78f0a1721b85
Size

1.7MB
MD5

1d9abaf9f90485d587ee55f87d41c066
SHA1

4021d749f94649d8781bc1e488be66ed6396316f
SHA256

f254ebcea22a41045691839cf33decbefb3c23805bad788e72fd78f0a1721b85
SHA512

9b538f972bd1d5b5e43cb6dddb9e98865d0f47225cdc90740f201b5a390375924e4981d2134a67e664c9fd10042760b0b707c14eac28d87bbd244240cc748b04
SSDEEP

24576:fvO2xJKRI2dOkx2LFYjHPOnOkx2LF2JbKkKF/eMNPjh:fHHKO2FQuTGHQC9KFeM3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f254ebcea22a41045691839cf33decbefb3c23805bad788e72fd78f0a1721b85

Files

f254ebcea22a41045691839cf33decbefb3c23805bad788e72fd78f0a1721b85
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ