1a99f34022502085b39fac93cd3fc7a7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a99f34022502085b39fac93cd3fc7a7
Size

1.2MB
MD5

1a99f34022502085b39fac93cd3fc7a7
SHA1

b4a307d5a526264cb3791b744f3e4d9a44ef6d41
SHA256

9297db53985a13ce8d6d8b30daa57eb94bf22deb2221ec61f27b48ddc53c5be2
SHA512

d027dbf944de39f5c39d30e79649108ce38cca8e1c7ae3ddb5d29f438d4483d7db702651868575d1528e77d5b5a48aacb62942949253951869c6f905c6913e16
SSDEEP

24576:DsSJe5l7iKZyRaVrkSS4eyaK1HODaDoY9sUMD:QVuR8rkp4eyD1HO26UM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a99f34022502085b39fac93cd3fc7a7

Files

1a99f34022502085b39fac93cd3fc7a7
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 828KB - Virtual size: 827KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 263KB - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ