2f58f42e0c0cf3edb5bf389a6d65d01920aaecf44b1a562a19adbb6c75ce9c2d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f58f42e0c0cf3edb5bf389a6d65d01920aaecf44b1a562a19adbb6c75ce9c2d
Size

570KB
MD5

5ae33a38dd57cb4e3000f39b74e59456
SHA1

8c3c8f945b12b29f3cdfc0c9a7cb853a6fc90ca3
SHA256

2f58f42e0c0cf3edb5bf389a6d65d01920aaecf44b1a562a19adbb6c75ce9c2d
SHA512

01c3a95a85bdc2a9fd459fec5351a28b8fbad9f011ef14be94f2d672cd522a75842fedc014ce4ec7962e524c7ec03f2925f4abf9e8db096ba80023339fa5e073
SSDEEP

12288:FsSEhmQRVj23vvOCb+K1tjdZqf0G7QgxfY:Fsf4Mj23XONKHUfUYfY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f58f42e0c0cf3edb5bf389a6d65d01920aaecf44b1a562a19adbb6c75ce9c2d

Files

2f58f42e0c0cf3edb5bf389a6d65d01920aaecf44b1a562a19adbb6c75ce9c2d
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 378KB - Virtual size: 378KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ