158a025ab1bb715a8935812423443f9e | Triage

Sharing

General

Target

158a025ab1bb715a8935812423443f9e
Size

321KB
MD5

158a025ab1bb715a8935812423443f9e
SHA1

19efb682c4698c937603c6d23312443fdbfbb467
SHA256

051f4467d925e0982874d918696e71af6c1beda32591fcc4a6308a25f24b9563
SHA512

c8dbee4ff6e43b2d091f0263ecf2e5b5b29c7dff7bbf753deb5b01fa26408b4da089011cbf07c76c0a10e731d0753d06b6900d02a750eca43d3d8ec028a4ffd6
SSDEEP

6144:Uo37NIIB2w92/AYniCYybwxoY0AT52XVH3G05xD69fNREMtx35:zZ/B2e2YBxyb+rT52XZ3PDavEi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
158a025ab1bb715a8935812423443f9e

Files

158a025ab1bb715a8935812423443f9e
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.tqn
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE