c558ae1f71c4bf93059fc19ac6e075dd7e61e59c3d29fa853b578c08a3272ec0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c558ae1f71c4bf93059fc19ac6e075dd7e61e59c3d29fa853b578c08a3272ec0
Size

6.9MB
MD5

7b44fb66774fb204c7b3b6e11da9d313
SHA1

58f977ddc09dc0351975a4a7d618a5c40b3c6d16
SHA256

c558ae1f71c4bf93059fc19ac6e075dd7e61e59c3d29fa853b578c08a3272ec0
SHA512

5005c1cc8ab1addd462a68145971cfceec51a4415b0a3b39cca2df191ea6363a62b47fe1da81134edc78b7c7f2051b3e060d99133021f6433c6d421b2f68f806
SSDEEP

196608:aSnj/mmV+GsH+bNueuJRAZVAOk5Vvz+tqE9AmEkzj:aSjumV+jHUodIjk5VzfE9Awzj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c558ae1f71c4bf93059fc19ac6e075dd7e61e59c3d29fa853b578c08a3272ec0

Files

c558ae1f71c4bf93059fc19ac6e075dd7e61e59c3d29fa853b578c08a3272ec0
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ