91284be1abe43be078adfbe0585483cfb180ef2de5fd56111ad679d43283cd67 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

91284be1abe43be078adfbe0585483cfb180ef2de5fd56111ad679d43283cd67
Size

6.9MB
MD5

5cd2798e502f36bc9a4c4163cc6f28ba
SHA1

4c5350f2c68104d7716a5c58863e98adb930ca19
SHA256

91284be1abe43be078adfbe0585483cfb180ef2de5fd56111ad679d43283cd67
SHA512

0f4fda74b113e110437b18c05bc4a44a5b09ffde64d60b7e70ac02219e53d411fcfc938a7fd80b1a0701098f472b0f9afecea4be67f3e30ed51f37b50c1e2ddb
SSDEEP

196608:KSnj/mmV+GsH+bNueuJRAZVAOk5Vvz+tqE9AmEkzj:KSjumV+jHUodIjk5VzfE9Awzj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
91284be1abe43be078adfbe0585483cfb180ef2de5fd56111ad679d43283cd67

Files

91284be1abe43be078adfbe0585483cfb180ef2de5fd56111ad679d43283cd67
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ