90ef06aa2e55211f18e83a6f0da7f379ca3b5ff23aa25419fadd078efe198851 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

90ef06aa2e55211f18e83a6f0da7f379ca3b5ff23aa25419fadd078efe198851
Size

2.9MB
MD5

de1a3b216a6cee9608516b0a39932c5b
SHA1

595d19b334ccfde2e2fcd52a98137b42e559d357
SHA256

90ef06aa2e55211f18e83a6f0da7f379ca3b5ff23aa25419fadd078efe198851
SHA512

190aa636a0ac3dd2e4bf84ab55662780a152014b19e8c43281aab2556ac65326a4107e35946f650a9d3434a2fca456b6c9039e122ac2b7c879c51bb877e82816
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlhqJeq+78fOL1Zp:Q+8X9G3vP3AMjeeq8xLJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90ef06aa2e55211f18e83a6f0da7f379ca3b5ff23aa25419fadd078efe198851

Files

90ef06aa2e55211f18e83a6f0da7f379ca3b5ff23aa25419fadd078efe198851
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 994KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ