pidgin-otr-4[.]0[.]2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

pidgin-otr-4.0.2.exe
Size

13.0MB
MD5

8b69115d1abcf1379c5047f8e408f359
SHA1

a5171310d0a4524f2f9bd84a4e04e35acd3894db
SHA256

bafe48bb81775d723528b1d0604dd8cc754117e4f8a23bf5e4c589d00bc1dd0d
SHA512

f0ef81d72c579461a93890605e75113d2314018a85cdc4d78194b1bac59cddd337411a9de390748cbdac6f70955c7165123db62166090b8c4c9bbc369ee1008f
SSDEEP

196608:CqYvmaThVTWNty+8Pw54kqhkOxvJ9t1nPMtjxAHvLEd5VJK:Cq6ma9VyNow5skiffn0ZxAE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
pidgin-otr-4.0.2.exe

Files

pidgin-otr-4.0.2.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13.0MB - Virtual size: 13.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ