160f7959a1617a7cf9d25194edb2a2f4d7af60070cb1af298d284711ef069305 | Triage

Sharing

General

Target

160f7959a1617a7cf9d25194edb2a2f4d7af60070cb1af298d284711ef069305
Size

3.2MB
MD5

dcfa7cccfbf90db3f5b539e39e1d5dc0
SHA1

6e72503f28e86fa2e6fee254023f19403251eeaa
SHA256

160f7959a1617a7cf9d25194edb2a2f4d7af60070cb1af298d284711ef069305
SHA512

11c5d1cae1b5764094af2a5ae88c4e42538d6b44e395463ca60991ee6dde2e76d81a61a80f3b5235b6b249d6c52c04d9faa445ff981d76ce1f00cef3fc2b5069
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTl3xABH05Jwos93p:Q+8X9G3vP3AM4m5i79Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
160f7959a1617a7cf9d25194edb2a2f4d7af60070cb1af298d284711ef069305

Files

160f7959a1617a7cf9d25194edb2a2f4d7af60070cb1af298d284711ef069305
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 994KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ