ab93ca2722bd65e36221deeb06053c42a14354e6fbb96fd12bebb52a77d48539 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab93ca2722bd65e36221deeb06053c42a14354e6fbb96fd12bebb52a77d48539
Size

6.2MB
MD5

1a42a052330d35601571522aef109aff
SHA1

a08c19bbbd73f66eff61736f651a9190767768a6
SHA256

ab93ca2722bd65e36221deeb06053c42a14354e6fbb96fd12bebb52a77d48539
SHA512

bfaf67f1b3a0e5ad17f1b6f3cb6c7fab2306901542043816d8089d424131829bd8944db6dd742f27ede6a0677287e1f78b27dced93adb410a048bfa30ba6ee7e
SSDEEP

196608:DdsgzLgS+U1FTkq7Ze3AlqaXluicbbhhTNxq:DSO6Uv4qISq8Uiq1hTPq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab93ca2722bd65e36221deeb06053c42a14354e6fbb96fd12bebb52a77d48539

Files

ab93ca2722bd65e36221deeb06053c42a14354e6fbb96fd12bebb52a77d48539
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.nsp0
Size: 2KB - Virtual size: 18.9MB

IMAGE_SCN_MEM_READ

VProtect
Size: 615KB - Virtual size: 616KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VProtect
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VProtect
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ

VProtect
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_MEM_READ