1a061553033e3ccee4d1049510b14a9a | Triage

Sharing

General

Target

1a061553033e3ccee4d1049510b14a9a
Size

145KB
MD5

1a061553033e3ccee4d1049510b14a9a
SHA1

d9a1f6945f4c384b4002ba80888a5e91edf1ebf2
SHA256

89a9797ed7955a1a3d841cd3d462e0d19c745967848490afe3452798060057c9
SHA512

30cf9cb2c89724a96fce54dde7b49a570b976c5b0292f66c9d5717156a98764ab97801e9174d21171cdfe83ce98e210e8a4bf307962c45970ff39fce878f183a
SSDEEP

3072:7Y0fB3XuQIgba4KupeLa67ccjr3yo/PV5ySVGpcjCC80LPhM6HEir:7LpuQIf8UO63j7/PVwSYpcjCd0LPO65r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a061553033e3ccee4d1049510b14a9a

Files

1a061553033e3ccee4d1049510b14a9a
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 501KB - Virtual size: 596KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ