ffe92cf8aec853d59be91e6073cd160d | Triage

Sharing

General

Target

ffe92cf8aec853d59be91e6073cd160d
Size

5.7MB
MD5

ffe92cf8aec853d59be91e6073cd160d
SHA1

fa90d96758ef78e2175f4b5cace21de90853531c
SHA256

b4ef07ebd188658c47e11b1731d967bdfb4d1944fac34ea726f8075d207956a5
SHA512

8a72c5c1cfec0898df51e26921dee2ac04185527240eaabd968e38f00fdeeb2f9866a9d7d6ba0f39f42443c7efcc718dc16d9fa20e86168e7a6673adbd228f6f
SSDEEP

49152:dHeOrbrb/TkvO90dL3BmAFd4A64nsfJZgP5MoFom9UwLS3pcOxF7Vooi6gwciPi9:dHJBgSmAQQQQQQQQQQQQQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffe92cf8aec853d59be91e6073cd160d

Files

ffe92cf8aec853d59be91e6073cd160d
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 725KB - Virtual size: 725KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ