fa808e19aa1790f61b0aed69c1f006f0_exe32[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa808e19aa1790f61b0aed69c1f006f0_exe32.exe
Size

289KB
MD5

fa808e19aa1790f61b0aed69c1f006f0
SHA1

c0fa4c19335a5b8a23f0bdcd721995984336250a
SHA256

fc88ae60629d4655bdc9874a3883288c85318e0884be7a15d36b119e5c767f0b
SHA512

3060d9e48c048c56aae51d651a37d1c8e6529ff7b0c23a1a9546d52c703ac7bdb1d0e25ee90ef84ade72679bb812842f3e6eac95958bce0f8f632c495986172d
SSDEEP

6144:VTc0YBso+WyQFMAZ/B7TXmlkECzJLaQVbU5:1YBsZQ3qklJLJbU5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa808e19aa1790f61b0aed69c1f006f0_exe32.exe

Files

fa808e19aa1790f61b0aed69c1f006f0_exe32.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ