448de78e607245c136f62f5a6da3b7531b0a1bb85cac2563f00d5795636c50d5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

448de78e607245c136f62f5a6da3b7531b0a1bb85cac2563f00d5795636c50d5
Size

5.2MB
MD5

e28d6c3cc1f3b81d0cc8955b76fecf47
SHA1

4b7e66b2b72aeba1651922d96ee9abc059014fd6
SHA256

448de78e607245c136f62f5a6da3b7531b0a1bb85cac2563f00d5795636c50d5
SHA512

56ea1371b8763c0035989bac0aa119e1f4543830b2205b0ecb13336f640a3c0e9d00494ac093ae7681c68563b9133613eb092ddd784d2b2811a89971f73d737b
SSDEEP

98304:G4UQ13eDvQYGAyN/N99Ewn91ougfcSndlhRwcY3m5MXQBLuYZq0lE:0NTQUyJN99EjfRdlhRhY3UBLFFu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
448de78e607245c136f62f5a6da3b7531b0a1bb85cac2563f00d5795636c50d5

Files

448de78e607245c136f62f5a6da3b7531b0a1bb85cac2563f00d5795636c50d5
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ