dbbec32605c4b1ae50e13795603546a1567e96a77052f8cc9cffb20f0cd4172b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbbec32605c4b1ae50e13795603546a1567e96a77052f8cc9cffb20f0cd4172b
Size

6.9MB
MD5

c427754174c395d9a6e0b49b699bfc9b
SHA1

8b4aa18794463bcd7d6ad48190d87ae53a5083b7
SHA256

dbbec32605c4b1ae50e13795603546a1567e96a77052f8cc9cffb20f0cd4172b
SHA512

6739cf8f32ebe2f87706abb428c81cfc117d7b84345e2e99b3f2c66484b1e10dd625c66f2cd458eea6ca40bec87eaa31c388ffaa790d0d628152d5b763ada3d9
SSDEEP

196608:HSnj/mmV+GsH+bNueuJRAZVAOk5Vvz+tqE9AmEkzj:HSjumV+jHUodIjk5VzfE9Awzj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbbec32605c4b1ae50e13795603546a1567e96a77052f8cc9cffb20f0cd4172b

Files

dbbec32605c4b1ae50e13795603546a1567e96a77052f8cc9cffb20f0cd4172b
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ