d77e388f11174adf8f2fcd8922d63a4fbe6fa679cd036d334d0b0793fe3af034 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d77e388f11174adf8f2fcd8922d63a4fbe6fa679cd036d334d0b0793fe3af034
Size

1.8MB
MD5

4972b1d44c817f016fca623704dd0644
SHA1

57466b1709645b3630a067cde006e7193fe59d0b
SHA256

d77e388f11174adf8f2fcd8922d63a4fbe6fa679cd036d334d0b0793fe3af034
SHA512

63bfe49389c7ca78417ffd1ac117679cff99c6c73d50fd4ec44410f631dc1e9b9df3b975d005c10f5cc745a3590d06497dd46fa6dbc5a8c611a625e76eb9790b
SSDEEP

49152:rAR6pHImCXi45lSevpEie7zoD449aXZmMA8OnSPCe:rwI7Wl5Yei1oU49unD8e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d77e388f11174adf8f2fcd8922d63a4fbe6fa679cd036d334d0b0793fe3af034

Files

d77e388f11174adf8f2fcd8922d63a4fbe6fa679cd036d334d0b0793fe3af034
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 747KB - Virtual size: 746KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

flag_dat
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 547KB - Virtual size: 547KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ