fa3d570597c78bf694d0b6e969e57a3d | Triage

Sharing

General

Target

fa3d570597c78bf694d0b6e969e57a3d
Size

3.1MB
MD5

fa3d570597c78bf694d0b6e969e57a3d
SHA1

5e2a85a836b33caab34b0bd0f8fd08ca6db33f4c
SHA256

8ff70135ee0fef093994da6e925e73e79b8b437b0166850f0385481334b1dc65
SHA512

81f6f73d827cbe9866c57270962f8dd7fd7a7442ef39ff3942c6be7d18d4a637d6e470fe61e31e8caf94fc153b96dd4f9cd5f7f714aea460a00a835224cf22d2
SSDEEP

24576:/1flT/Vk3WuvFpw/rnw/r61flT/SCqnstLyUktHIiLyHAuDzxWD1flT/D:/nTHuvFKs2nTjqnstLet3LyvDzxAnT7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa3d570597c78bf694d0b6e969e57a3d

Files

fa3d570597c78bf694d0b6e969e57a3d
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ