13da999aeb501067578605a40d35a649 | Triage

Sharing

General

Target

13da999aeb501067578605a40d35a649
Size

1.9MB
MD5

13da999aeb501067578605a40d35a649
SHA1

d80ad5ea3c3e7153e6573f2b1a4e9bc30cedfa79
SHA256

90750ceba81fbf3cc9e65ee8872c7457e47212f8de4c2119a8e4f63e30f59a8a
SHA512

2e161b094902a94dbc168c63e3edf6479c2ee82b21c4496f0da82414501da092aa29f620d4d7ff5b5ac3113596b8bb07716eacf7c98b2ba07e412061da5c9532
SSDEEP

24576:T8OfLqL9mDtaLg/DRZhf0deU/N9M+ugdM4WC6wK3Mu2EjzZ77+xH35DMw2n/qIjG:QOfL2mDta4j9+h35DMnCIjtAyj9VfWB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13da999aeb501067578605a40d35a649

Files

13da999aeb501067578605a40d35a649
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 220B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ