b7749c763bd6135c8dbc0da2a89ebf19cf3aeb3297f1fc36ded9264bb802a355 | Triage

Sharing

General

Target

b7749c763bd6135c8dbc0da2a89ebf19cf3aeb3297f1fc36ded9264bb802a355
Size

3.4MB
MD5

e60df685943c899256c5ff89f2606649
SHA1

df0e8370daf5e0933f47cf7a0fbec0a198460b02
SHA256

b7749c763bd6135c8dbc0da2a89ebf19cf3aeb3297f1fc36ded9264bb802a355
SHA512

281e49ec9e39b689aa6f495c549fd9fee0b1eb6af9b944ddf02d228ea9c7916c9898761b3c15cdfcee3de1f65801ad822979c1762da324735124b1c442af4346
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlr0H9JZl9W5tRd5/V8pNCl:c+8X9G3vP3AMM79W5tRdtV8fa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7749c763bd6135c8dbc0da2a89ebf19cf3aeb3297f1fc36ded9264bb802a355

Files

b7749c763bd6135c8dbc0da2a89ebf19cf3aeb3297f1fc36ded9264bb802a355
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 994KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ