1cf6c9d8a4ee4b42928a34641c90e95e | Triage

Sharing

General

Target

1cf6c9d8a4ee4b42928a34641c90e95e
Size

48KB
MD5

1cf6c9d8a4ee4b42928a34641c90e95e
SHA1

69e3474d0a4e4c376761afe338d69aa71b137e9d
SHA256

9907dbcdde60d92e5aef30d95a9abc263529fb98aa2a546f6a487ab338b19f16
SHA512

d7b05c3cb30cee8827c1abe7ec8b89cd213e9d14fd34a078de30893695e1ebf52847119269e6db195564f8bc9caf2c7844295080db210dde896612e5aa7ae2ed
SSDEEP

384:lvff+Vn3PEPIPPARW84ojCQ5V9yNpMCHFx1tPU0Ie7ATk0VRlVGQ116qkDz+S1G:lH2t3cg44o8s0NPUdk0HDG416j+D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cf6c9d8a4ee4b42928a34641c90e95e

Files

1cf6c9d8a4ee4b42928a34641c90e95e
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.neolit
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SEFCMD
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.PTData
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ