0fa06f21cd950d506e98f3ccb95017b298aa4417d4b5bc34a917fa7c8dbefcfb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fa06f21cd950d506e98f3ccb95017b298aa4417d4b5bc34a917fa7c8dbefcfb
Size

2.1MB
MD5

120adfebe22bca52a923f8d205649fc7
SHA1

3611cf938c324dccb29f172f6441bccffe1578fb
SHA256

0fa06f21cd950d506e98f3ccb95017b298aa4417d4b5bc34a917fa7c8dbefcfb
SHA512

54c42f69b450088eeaf43acd01708d3395573f659ef6590c2fd24e50b051c8a8be0cdea0c638e311dabca1e22abbfb967c44465c1c3cf240a2fd13562938171f
SSDEEP

49152:mcgmYhzzaet/guXvfbpuPdopFcF3dtaSCrL:SmYhzzaet/guXvf2op63dYr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fa06f21cd950d506e98f3ccb95017b298aa4417d4b5bc34a917fa7c8dbefcfb

Files

0fa06f21cd950d506e98f3ccb95017b298aa4417d4b5bc34a917fa7c8dbefcfb
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 536KB - Virtual size: 535KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

linholer
Size: 615KB - Virtual size: 616KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

linholer
Size: 763KB - Virtual size: 912KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

linholer
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ