064f01442176a8dd512e9c6e978d8042 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

064f01442176a8dd512e9c6e978d8042
Size

2.2MB
MD5

064f01442176a8dd512e9c6e978d8042
SHA1

e5a8d724620a7806e23c7ad7913c0a145e2bae0b
SHA256

91440b97e8a25ff08594d74f5d62664bf0d6d6dc11a2dde4e7c7048388068a92
SHA512

83258c860c328f4bb988f1944ea2828a2c414a396717ec6bb6f7335c01bb03e9a0023efc9c3b50e877f2c94d59849352ab93e80b66db003cdfa8484b70853d2b
SSDEEP

49152:thW7YCWlIssZLi5lKr+DgI+RoJdXN0BMOwLloBrugOBj8iI3Xi1wF:HW7LGU2HJdXN0B7+ssyKwF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
064f01442176a8dd512e9c6e978d8042

Files

064f01442176a8dd512e9c6e978d8042
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

petite
Size: 325B - Virtual size: 325B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ