cf5a42a2f6bda81dc3ce80575fcfcc79 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf5a42a2f6bda81dc3ce80575fcfcc79
Size

5KB
MD5

cf5a42a2f6bda81dc3ce80575fcfcc79
SHA1

53235b74f0d6c5dcd7f83bec9e871e288c895063
SHA256

c6815d6f3d666191ae25ed70f4e9d93cc22e973f7d8005ec66cfe8a63f9b334f
SHA512

3c186fd1636ab4ca2841a7c3b6bb871a0a474736ea07a55cbb4d6b0aadaf533c097de4d063f2364b1a33e678174f70e3f4e78e908f844793c7588c257a662a22
SSDEEP

48:LgomS6ittsWZBliGjHsVmyOcYDtLu024rSRqG5RKDNtdpx:co13N/byOBBp20S48RKDHdpx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf5a42a2f6bda81dc3ce80575fcfcc79

Files

cf5a42a2f6bda81dc3ce80575fcfcc79
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 312KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 808KB - Virtual size: 807KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE