cf08cb6c9c343150ec5b98b84e43a9e572c990c80ec0e59a481872fff89d2ebd | Triage

Sharing

General

Target

cf08cb6c9c343150ec5b98b84e43a9e572c990c80ec0e59a481872fff89d2ebd
Size

3.2MB
MD5

a7abb8421c93ce86a4530a4b0593d626
SHA1

1f56092378bdc9d49a2de64c7aca420a84b3fed3
SHA256

cf08cb6c9c343150ec5b98b84e43a9e572c990c80ec0e59a481872fff89d2ebd
SHA512

d4a74fb68f8a20bfd55c381770b70e86cdf2a985ff61fee682123261b257d978d7992cc6dcd38d8b65492269ae581f171c4921d06d2e9d895435a12455505bc3
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTljIqaM9scZVYB42WPo:Q+8X9G3vP3AMdILS2BzWA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf08cb6c9c343150ec5b98b84e43a9e572c990c80ec0e59a481872fff89d2ebd

Files

cf08cb6c9c343150ec5b98b84e43a9e572c990c80ec0e59a481872fff89d2ebd
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 994KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ