622537c939ffd026ef8660fb7360856a51ade7c681d6cc193ba83aaf91f7f9a7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

622537c939ffd026ef8660fb7360856a51ade7c681d6cc193ba83aaf91f7f9a7
Size

2.5MB
MD5

a67771f34dbc13ef2ce8cfeafe373529
SHA1

dd45dd447dba7c2e22b65dde793701ea439fa5c2
SHA256

622537c939ffd026ef8660fb7360856a51ade7c681d6cc193ba83aaf91f7f9a7
SHA512

ece05f59a132eed5c1858af011307d3ec46d2e5fddc0327455cc648c93e309666270d49f6a659b7cdb516c1a1cf6406aa20efa999d89e6a475f8922e66a3d819
SSDEEP

49152:jw+7SlqEmHnYEawhtIqp+6fbMBnD88OxW6kl:jwSzHYEaw3p+6jMF8U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
622537c939ffd026ef8660fb7360856a51ade7c681d6cc193ba83aaf91f7f9a7

Files

622537c939ffd026ef8660fb7360856a51ade7c681d6cc193ba83aaf91f7f9a7
.exe windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 330KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 38KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE