b0196a1c78b8c7bef7dfdfe9995e8431d9ec5c78893ba30586a508fe25acfd9f | Triage

Sharing

General

Target

b0196a1c78b8c7bef7dfdfe9995e8431d9ec5c78893ba30586a508fe25acfd9f
Size

2.7MB
MD5

1ecf652d87abf446360420d46184dfa5
SHA1

d043b2e578ca2c5cf4bbe8fb80a1f11e40cb24cd
SHA256

b0196a1c78b8c7bef7dfdfe9995e8431d9ec5c78893ba30586a508fe25acfd9f
SHA512

5f1e0e932604998764306b8bde95f68a5786750211a6890038fe8af16c4497ac6b147763dcfff141d850b9de49e24c838650d0767bf2f61070e16573cacb9cae
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlGglCdDtUld:Q+8X9G3vP3AM0glqZC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0196a1c78b8c7bef7dfdfe9995e8431d9ec5c78893ba30586a508fe25acfd9f

Files

b0196a1c78b8c7bef7dfdfe9995e8431d9ec5c78893ba30586a508fe25acfd9f
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 994KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ