1fcf943ae1d182af3b13973a69cfb72a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1fcf943ae1d182af3b13973a69cfb72a
Size

214KB
MD5

1fcf943ae1d182af3b13973a69cfb72a
SHA1

5ac1747cc8f5c7331877765130dca282e6b08edc
SHA256

5c5e6166b26ec5f91a0256999c20639eb35ec9d7dce1269a3d24f058e41347eb
SHA512

d8ea87ddd88aa1133bcc4a103929a31ce034f5815ce162930e1c527315984a270dd3fb8dfdf4a15227b2592cf1c871fd8894262ec1347152a65fb85a4f1db52c
SSDEEP

6144:zWN8e5Ktf4M9EudSi6pZkwFwaVN0vwMYxfH8:4VPuUPrVSw5FH8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fcf943ae1d182af3b13973a69cfb72a

Files

1fcf943ae1d182af3b13973a69cfb72a
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 97KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE