5a6ffb1e2a0b8cccbfb010ab1d02e47992acabb6340337d8fb8e70e79d72daf9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a6ffb1e2a0b8cccbfb010ab1d02e47992acabb6340337d8fb8e70e79d72daf9
Size

2.9MB
MD5

29df68e791f20a51fbccd52f48dd45c4
SHA1

75107b53b8fe9c14478d93e987afe67845c0bc90
SHA256

5a6ffb1e2a0b8cccbfb010ab1d02e47992acabb6340337d8fb8e70e79d72daf9
SHA512

787deb9e9c70cef2fa93d594c433155ec56727854fd26ee06c1a1f82032473ca5db5a371bcb86cb451f403f2d9a8ec6bf639099d34b82319ab929cdcc6a65b5c
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlAL4UhMPsOPNgH2iEbt:Q+8X9G3vP3AM82UO02iW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a6ffb1e2a0b8cccbfb010ab1d02e47992acabb6340337d8fb8e70e79d72daf9

Files

5a6ffb1e2a0b8cccbfb010ab1d02e47992acabb6340337d8fb8e70e79d72daf9
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 994KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ