c39ac474b72d296660bb1f6f41bbf6ef1218c18dc3cf37679b7b544a0085ea07 | Triage

Sharing

General

Target

c39ac474b72d296660bb1f6f41bbf6ef1218c18dc3cf37679b7b544a0085ea07
Size

3.4MB
MD5

16498edfa9c24bf662467430bb798331
SHA1

dccd7c5ee5506025ba8db4e8af85ecc4ce281d7d
SHA256

c39ac474b72d296660bb1f6f41bbf6ef1218c18dc3cf37679b7b544a0085ea07
SHA512

faa97e0c59fee249104e6fd1b0c06fe6a8a6443724e38c3490ce15f4004e7c89911bf6e57ff0e891808f32f6a8fbd4099595ab722fbaf046c3e6e1334d6ed173
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlm/VwLXhc6BBT+:Q+8X9G3vP3AMc9wa6PS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c39ac474b72d296660bb1f6f41bbf6ef1218c18dc3cf37679b7b544a0085ea07

Files

c39ac474b72d296660bb1f6f41bbf6ef1218c18dc3cf37679b7b544a0085ea07
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 994KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ