930e79f1238e704f58d81e820e16ff85 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

930e79f1238e704f58d81e820e16ff85
Size

2KB
MD5

930e79f1238e704f58d81e820e16ff85
SHA1

1d918f638320c33f3e2446a6acde250da6e122bf
SHA256

053ecad4f93e26da6558261a419167f38ee446418ca8c125b72d53f9a45c6378
SHA512

3de74ad375f0753612aaff1462a834d758cb6e3468a83b8554d4265515af2861c7d70a695756dd4c7d9a06735b9113c39fe2a90f65d7c5dcdfbf2bcc36574d9f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
930e79f1238e704f58d81e820e16ff85

Files

930e79f1238e704f58d81e820e16ff85
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ