a99806cc5d57ceb36b02d6c928b59635ad69b2114a47278bbcd84055d5fed246 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a99806cc5d57ceb36b02d6c928b59635ad69b2114a47278bbcd84055d5fed246
Size

2.6MB
MD5

f97b1b815b1cdfc464d1ede2d7a7bd29
SHA1

005262e8ad2639e58368260943e90ed56093a824
SHA256

a99806cc5d57ceb36b02d6c928b59635ad69b2114a47278bbcd84055d5fed246
SHA512

ef7304bfa9e2e990ba342c8c2355bbae6f391fb45bd47cb1c0b287558085f22d68a6956e7449cd06391c5acdc9c4e02b12d6d9cbd7da5c9a63b0b400e81308e9
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlKtCyCD149pZQc:Q+8X9G3vP3AMgcy2149puc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a99806cc5d57ceb36b02d6c928b59635ad69b2114a47278bbcd84055d5fed246

Files

a99806cc5d57ceb36b02d6c928b59635ad69b2114a47278bbcd84055d5fed246
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 994KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ