120070b8aa248fb7982f47fead01ab51c7afdd1886cf28945675ba9503f843d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

120070b8aa248fb7982f47fead01ab51c7afdd1886cf28945675ba9503f843d8
Size

9.1MB
MD5

e753ea67baf8b81e4ed4b1b62c355036
SHA1

4a00539e05118adb9730a05440e86169560af7e4
SHA256

120070b8aa248fb7982f47fead01ab51c7afdd1886cf28945675ba9503f843d8
SHA512

c64181eaa41d8c25c510d0e172208bd0e136b65ceb9d5bdba4bd48ccd2b21af79fedbf6602787f77352e9e019ec2eb1dcf922993d52ca06043253abf2023849c
SSDEEP

196608:tXo7+sclu5Nz9/BcBFOeDs1YpveHDIWB7f9e+xtOZy4kOp:SYah9/+vOeoaEHDJTa5p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
120070b8aa248fb7982f47fead01ab51c7afdd1886cf28945675ba9503f843d8

Files

120070b8aa248fb7982f47fead01ab51c7afdd1886cf28945675ba9503f843d8
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 600KB - Virtual size: 600KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8.2MB - Virtual size: 8.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE