31bf68084854a33927914af6f954d04f0fbeef0f60f070db540a1fc1fa645757 | Triage

Sharing

General

Target

31bf68084854a33927914af6f954d04f0fbeef0f60f070db540a1fc1fa645757
Size

2.9MB
MD5

5c43d87b86f3b1353bbc509f77e48adc
SHA1

5c53fa3c5ed8d666187e6a94964c1d45d20a8544
SHA256

31bf68084854a33927914af6f954d04f0fbeef0f60f070db540a1fc1fa645757
SHA512

14bf08fccd9583647651b5e981a61c4c540c2566369d88296f9204962b438bc227bacb8c4a771ec71719222f66bb1fc07202292ac2a3e2780fdbfe81e4d8cc02
SSDEEP

49152:O/aNbxbFC4S8viiHO1Y4xtY/Z4D1PuVhh49gQqncF3dtaSCrL5:zNrhPO1Y4TY/qD1WnUD3dYr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31bf68084854a33927914af6f954d04f0fbeef0f60f070db540a1fc1fa645757

Files

31bf68084854a33927914af6f954d04f0fbeef0f60f070db540a1fc1fa645757
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 2KB - Virtual size: 805KB

IMAGE_SCN_MEM_READ

VProtect
Size: 615KB - Virtual size: 616KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VProtect
Size: 2.2MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VProtect
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ

VProtect
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_MEM_READ

VProtect
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE