138f9cf035949ebe22201a07050393a2 | Triage

Sharing

General

Target

138f9cf035949ebe22201a07050393a2
Size

340KB
MD5

138f9cf035949ebe22201a07050393a2
SHA1

1ec1cb5192dcfe6c91f2188c52e2a887d9bd7b2e
SHA256

bdd3c02bdc20b1be495f12b36ad1f2bcda2db8df4d1656c2851272a180eef87e
SHA512

8357637b07e48ebcdf139e4644f87e6d8981014fb4137e9181205c6debc62bffa0cbf70bda90d280f070477d3eea21e985ef8b97eaef95431ee597c38dcf04a3
SSDEEP

6144:gaiT+Fc7hF4XbqpMQRyHGW80VoHUwFAA1z+tVThLFdSQShKvTCmsWwPr99jehD:glOciqpNyVXBVRSbhbmJwn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
138f9cf035949ebe22201a07050393a2

Files

138f9cf035949ebe22201a07050393a2
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CRT
Size: 324KB - Virtual size: 483KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ