fcf6e859e811b6b4b94e5b185acf7747fcaf6fd17f47c4520cbaf67f1d747f43 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcf6e859e811b6b4b94e5b185acf7747fcaf6fd17f47c4520cbaf67f1d747f43
Size

5.6MB
MD5

693a96d9725194eadf972a05a497445f
SHA1

4020e5c5f5eb187216cacc05b7f4a1a738692937
SHA256

fcf6e859e811b6b4b94e5b185acf7747fcaf6fd17f47c4520cbaf67f1d747f43
SHA512

059250f55cac0eb8b4d9b0452fb1f7f29881a0cd12ff2c44d54aba91c234a63e5ba6ce527c38e1b580085d591f5e4fb521a856c14459d5054203636acd1d7d86
SSDEEP

98304:FiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:cRm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcf6e859e811b6b4b94e5b185acf7747fcaf6fd17f47c4520cbaf67f1d747f43

Files

fcf6e859e811b6b4b94e5b185acf7747fcaf6fd17f47c4520cbaf67f1d747f43
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 97KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ