228bbb1f4c0d5e7d2321f1f6f20e576a2573be3a30a2a473472a520216d8a5a5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

228bbb1f4c0d5e7d2321f1f6f20e576a2573be3a30a2a473472a520216d8a5a5
Size

1.4MB
MD5

76ab9614a81aa5ba3b49cd18231a6e8f
SHA1

d60d3a3071bc1102e9b8a399644c53a80d3d3df8
SHA256

228bbb1f4c0d5e7d2321f1f6f20e576a2573be3a30a2a473472a520216d8a5a5
SHA512

005df5dae2393584fdd36c94b4067f58c97f586007f386e53b1e89843b29cc41b6cfe7e5294972acd10d0d251cbf9b63191ae46f841c90ce50871c800f2d21aa
SSDEEP

24576:saVl9LKk66UZHbALBBZrhUjbTrmHkHjrOAD3+wIWHmMrI693qyaXxQ41OJVJ9eYG:VZ4bALBBZ1UfPrzDu/2qy8xQ41Ob5jSf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
228bbb1f4c0d5e7d2321f1f6f20e576a2573be3a30a2a473472a520216d8a5a5

Files

228bbb1f4c0d5e7d2321f1f6f20e576a2573be3a30a2a473472a520216d8a5a5
.exe windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ