b3054ec2cd444dd61b49dda8c06e50c7d699ed515845f9feb44abf24287f8899 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3054ec2cd444dd61b49dda8c06e50c7d699ed515845f9feb44abf24287f8899
Size

399KB
MD5

a592c4cd6dfd4d3ec5c272d41929297e
SHA1

9f5f32f3bd5cbe186139bd0a634ab900f2f1514e
SHA256

b3054ec2cd444dd61b49dda8c06e50c7d699ed515845f9feb44abf24287f8899
SHA512

d05be3acd896903978f0e8cb92513625bc5434606ec9d9f469f32b90ff26e5609db7f9a74ec90c787e2513b8fee0094a0d4980857528c16d253e3f1c32b2e5b9
SSDEEP

12288:NtBp/wZ1biAH0yLcI8icmN2tQflVMjk2HU8u:NtBCbz0lIbN2tQflVMjk2HU/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3054ec2cd444dd61b49dda8c06e50c7d699ed515845f9feb44abf24287f8899

Files

b3054ec2cd444dd61b49dda8c06e50c7d699ed515845f9feb44abf24287f8899
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 346KB - Virtual size: 349KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE