cfce6f4a3a939d19794f593a7aa20d66274a461905a90868b3959045a240af96 | Triage

Sharing

General

Target

cfce6f4a3a939d19794f593a7aa20d66274a461905a90868b3959045a240af96
Size

2.5MB
MD5

324eafcbbf2e7c7bc32dffecbdd6c6c4
SHA1

6c39647dea53768a068cecfa2d10a27cc93cd874
SHA256

cfce6f4a3a939d19794f593a7aa20d66274a461905a90868b3959045a240af96
SHA512

4ca8a705976af09a14d74b3bdd5e6b1252de5ad7ae1f50a650828ea6ca19b570867fe0abed6b8acc2af80cd07d6e376b76bc0f2137a515c66338b80a0956309b
SSDEEP

49152:h2bERBctaqluW8thU0kW2LTxMlR6bJl7Z/EqFtP9E5gWwXo4MLVH4RY0E:kO0lqtWJZMlkJlNdVE5nwCVYlE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfce6f4a3a939d19794f593a7aa20d66274a461905a90868b3959045a240af96

Files

cfce6f4a3a939d19794f593a7aa20d66274a461905a90868b3959045a240af96
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ