c1ffe6bb473f2074ba5e4f8144983e2c50b7a7a07f5632f5764369d34d038cb8 | Triage

Sharing

General

Target

c1ffe6bb473f2074ba5e4f8144983e2c50b7a7a07f5632f5764369d34d038cb8
Size

3.3MB
MD5

0288c69d683d534170a76701180afd01
SHA1

fd2f645b3b03c699ca371fdb550ae550b57278e5
SHA256

c1ffe6bb473f2074ba5e4f8144983e2c50b7a7a07f5632f5764369d34d038cb8
SHA512

bdd02e13a713be07cd74fa714599a0140de28b1bb21d6f4f4b21d59b65b1906b6b82459c7f1388e7376de04dd8158755a90eab23c5f3b765e7ebe0880edf9de0
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlGra10aqpS3cZUWFV24:Q+8X9G3vP3AMujawsoUWd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1ffe6bb473f2074ba5e4f8144983e2c50b7a7a07f5632f5764369d34d038cb8

Files

c1ffe6bb473f2074ba5e4f8144983e2c50b7a7a07f5632f5764369d34d038cb8
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 994KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ