dc22b299c36c46d8db7568c1d35983d6340cc04f59f03570c643576a5504e985 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc22b299c36c46d8db7568c1d35983d6340cc04f59f03570c643576a5504e985
Size

7.5MB
MD5

4444e3b4582f242963ff99bc41c05cdd
SHA1

7030bb2bcbfbdc4bbadc1856b474e63c7c2df24a
SHA256

73a3f810fb10e61e2ac5f36cf65c85d6cffba4218369f75d255efd4f9faab0ff
SHA512

f6b380c02f2aeb661fd5ef9760dec49129c79671b6f03b11808eae11b2c8b8bed5cf6ac8b3b29de4a1cdda0300251c8fe1a858b3ef74069f97e16ff3c0303556
SSDEEP

196608:FiC5C89rf14r3WMfSprXYjS+nMu2mrhjF1Y/WB7O4gN4:HD1U4FXPiRrZk/k7O4gN4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/dc22b299c36c46d8db7568c1d35983d6340cc04f59f03570c643576a5504e985

Files

dc22b299c36c46d8db7568c1d35983d6340cc04f59f03570c643576a5504e985
.zip
dc22b299c36c46d8db7568c1d35983d6340cc04f59f03570c643576a5504e985
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ