293c2f6e84adb59ed4143bc6823ad6bd | Triage

Sharing

General

Target

293c2f6e84adb59ed4143bc6823ad6bd
Size

354KB
MD5

293c2f6e84adb59ed4143bc6823ad6bd
SHA1

48fddcb35100a5de88c89d828fb533df7281b3af
SHA256

5488cead1cc5eec5f3532ce17fb3e47024c1c61365cfbf75e8968969d9567c42
SHA512

1983eb6e0908755a9f25f3aa0f28a55579b7b7d8d4d93baaa7081868d4de838d0a1849993d54af532aedc410c1990b3ee9813c94aa858e6113a30b83ff7404e6
SSDEEP

6144:x/b4MpugzjDAqRhFxNBfrlMce97hI8WGNTNYdMzATVkQNUO7q5h:x/b4MphxF3BzoxMGNTCWsTGQ4T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
293c2f6e84adb59ed4143bc6823ad6bd

Files

293c2f6e84adb59ed4143bc6823ad6bd
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 260B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ