56af3d1942f02eee57f1768ff342ad75760ce3f9e022b881f8bc4f2f7c8c8976 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56af3d1942f02eee57f1768ff342ad75760ce3f9e022b881f8bc4f2f7c8c8976
Size

2.4MB
MD5

e69436846a6f0da14167c37f8f70ee5e
SHA1

108d8a29a06c1dc3bdbc23ffc3b4ebe69ee78032
SHA256

56af3d1942f02eee57f1768ff342ad75760ce3f9e022b881f8bc4f2f7c8c8976
SHA512

0d0533ff084e6f5cd1f009210c70ea601dc34668717c672395608c9b8acdb291f1cc57fa3f2d18fe277f8d3a8b9ab9198c378c04849113604118dadcca7d41de
SSDEEP

49152:wahubpT6vbpkIja3Jr1YVnYw97BV0cF3dtaSCrL:ubpT6vbpk8a3Jr1Xw3Vh3dYr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56af3d1942f02eee57f1768ff342ad75760ce3f9e022b881f8bc4f2f7c8c8976

Files

56af3d1942f02eee57f1768ff342ad75760ce3f9e022b881f8bc4f2f7c8c8976
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 769KB - Virtual size: 769KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 201KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

linholer
Size: 615KB - Virtual size: 616KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

linholer
Size: 764KB - Virtual size: 916KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

linholer
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ