fa94cfe5a31d6b2abce478ab81c35c488f14e62fabab555250585eea1fe439e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa94cfe5a31d6b2abce478ab81c35c488f14e62fabab555250585eea1fe439e2
Size

3.4MB
MD5

726935fee96a742516ebb99b3ffd3e12
SHA1

01a5ee96001712a072f0a2749396e606bc4d8043
SHA256

fa94cfe5a31d6b2abce478ab81c35c488f14e62fabab555250585eea1fe439e2
SHA512

0e81efbca757fd6c0771ce2062fd639b6c6c39b53cd4ee221dd59e7c4b9753d2e05e51a939f9263d71949c8ebf62fc4668933e700b031a58e6627fb1af0343ce
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlndNLC/WKAN7bg0iN7+sz+KtdJg:Q+8X9G3vP3AMp2WKAWl7NHu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa94cfe5a31d6b2abce478ab81c35c488f14e62fabab555250585eea1fe439e2

Files

fa94cfe5a31d6b2abce478ab81c35c488f14e62fabab555250585eea1fe439e2
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 994KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ