1339e96ccd8025e184bc416888386657 | Triage

Sharing

General

Target

1339e96ccd8025e184bc416888386657
Size

1.6MB
MD5

1339e96ccd8025e184bc416888386657
SHA1

874ae0e2871f134c02ea51113f491852901a64aa
SHA256

cff312331de33df683d7514023656d0c0aa122da73e8aa2607b5181f02e81307
SHA512

462a830e9ae748635b7f10b1782de3a7bb4445b4b1c694e0387eef3bb62ee437ffa5972ac588f310919819914e1454f1c337efdac976a6fe0ddf4b73aed73fcc
SSDEEP

49152:xBcgkW5/JMV9xO9nLwDp8BUpwuAsrUqa46S:xBcgkW5/g9QBLwDp8BnuAyLvN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1339e96ccd8025e184bc416888386657

Files

1339e96ccd8025e184bc416888386657
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 545KB - Virtual size: 545KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ