1200be595a0ecd3e204e10ce813fc2d5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1200be595a0ecd3e204e10ce813fc2d5
Size

216KB
MD5

1200be595a0ecd3e204e10ce813fc2d5
SHA1

066ee43227f02c18a7e42e2a0bd42b6f4dd1f018
SHA256

4131c67921653f61ee80147650478016565d0bfa376330375bfd6c6a09e09a74
SHA512

0ebbed9d1a1f3e4436a0d410e75c7b0e35ae6059267de5879daf00b225cc8d00ca0045a0c6ec0ce10042dfdf9231a8f0eaef796c1aa6790b9626ef07d38073ef
SSDEEP

6144:geuEsstUk4j79rRGuyZK6m9yJkr6X9aC3s1LBP:gOtn4j79rRyK6fX9t30L5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1200be595a0ecd3e204e10ce813fc2d5

Files

1200be595a0ecd3e204e10ce813fc2d5
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 225KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 39.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tuzal
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.jonajuk
Size: 512B - Virtual size: 23B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ