b1c70a1973302893ce15b30ee8ed96bb6e8db9e91e7b0b659ad02acd5f8c9288 | Triage

Sharing

General

Target

b1c70a1973302893ce15b30ee8ed96bb6e8db9e91e7b0b659ad02acd5f8c9288
Size

3.1MB
MD5

2cef05a580e1e00d8a7ff17e81f4d8bd
SHA1

239aec1fd4c02d9411065ea4be4afc858a7c151e
SHA256

b1c70a1973302893ce15b30ee8ed96bb6e8db9e91e7b0b659ad02acd5f8c9288
SHA512

0a608d662a10887e50444be7ab6fe7d961a268b2324b8a533930718904c6adb09d697a5c67378e3c3eea3f8e64711ccc02acb2a8cb0668fc969e2ae82288621f
SSDEEP

49152:ZWAXnCdKTLNOVO79j5mPNJTjuj/ErW/uDzAG0BfcF3dtaSCrL:ZxXCdKTLNO07aPNIbEmuDz2B43dYr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1c70a1973302893ce15b30ee8ed96bb6e8db9e91e7b0b659ad02acd5f8c9288

Files

b1c70a1973302893ce15b30ee8ed96bb6e8db9e91e7b0b659ad02acd5f8c9288
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 777KB - Virtual size: 776KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 831KB - Virtual size: 830KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

linholer
Size: 615KB - Virtual size: 616KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

linholer
Size: 764KB - Virtual size: 916KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

linholer
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ