dc79e1105449d1ed8170d1d9f5a902679a7aeeb5affa2a06d299cb9c67e5fb14 | Triage

Sharing

General

Target

dc79e1105449d1ed8170d1d9f5a902679a7aeeb5affa2a06d299cb9c67e5fb14
Size

6.9MB
MD5

bb901386013adf67761793ee1bed337b
SHA1

a9cdcd24a185cdba87199a43ad22b4dd98b4ed2a
SHA256

dc79e1105449d1ed8170d1d9f5a902679a7aeeb5affa2a06d299cb9c67e5fb14
SHA512

31519c6dd11b9e818306d30bbc3af030500b82c547d9203e418fa5899cc98e179dc6cbf32e1a6fd6e872ba7c5970214e20462ad428f98d373cb5b0964eab7e19
SSDEEP

196608:FSnj/mmV+GsH+bNueuJRAZVAOk5Vvz+tqE9AmEkzj:FSjumV+jHUodIjk5VzfE9Awzj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc79e1105449d1ed8170d1d9f5a902679a7aeeb5affa2a06d299cb9c67e5fb14

Files

dc79e1105449d1ed8170d1d9f5a902679a7aeeb5affa2a06d299cb9c67e5fb14
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ