afbb8d251fe2908424bd2bd6b959c4d7e198183e438ce63cc0a3da60009f930e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afbb8d251fe2908424bd2bd6b959c4d7e198183e438ce63cc0a3da60009f930e
Size

2.9MB
MD5

ca52bfbcbb189ab314a97d02df6c6d6f
SHA1

1aa91ec69c0d19ebaa6c91cbaf731e6423d0ab4d
SHA256

afbb8d251fe2908424bd2bd6b959c4d7e198183e438ce63cc0a3da60009f930e
SHA512

04658c2ca2fee91c41ea43e8bc4530e7b6adc12bbc9c934c436aed067a530a12ee24da6cf843fc00e99823d57d437d941039fd539dc71d8ffae368fd34dba157
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTl8QRvVROQz9zUz+H:Q+8X9G3vP3AMeQRvV0QBzUi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afbb8d251fe2908424bd2bd6b959c4d7e198183e438ce63cc0a3da60009f930e

Files

afbb8d251fe2908424bd2bd6b959c4d7e198183e438ce63cc0a3da60009f930e
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 994KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ