1418fcf393b1022f9abe08f72a764e97 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1418fcf393b1022f9abe08f72a764e97
Size

89KB
MD5

1418fcf393b1022f9abe08f72a764e97
SHA1

b6f9e7e90d07086e81d57bd6abae789f824ecb40
SHA256

c611d21ca1d68b19f5616849bcbaeaf9993c9555a04daaee7588ef3f61787e5f
SHA512

fb5cc43b6088d0a7cac3f21110a3a0568fb3c28ffb89bd446554cead845d60075aa0a4b7601b8e727b7806bc93958ea49d321e7a01e9f250781f1ec1ad04c21c
SSDEEP

1536:I6YFJ35YqDdE0EYLKy+ZgU9I8yYXwL+ITKat7sXN4DNGyJ:I6ebPbLy6cAL+iXOXN4ZGyJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1418fcf393b1022f9abe08f72a764e97

Files

1418fcf393b1022f9abe08f72a764e97
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

300
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Katja
Size: 217B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE