299a0e2f6bf762e0fe9c92bc91f00c83 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

299a0e2f6bf762e0fe9c92bc91f00c83
Size

475KB
MD5

299a0e2f6bf762e0fe9c92bc91f00c83
SHA1

3ba1a9c77d870026f0eb430ef4eb735bcad789b0
SHA256

51d031b1566a03eb26dd04b8231ffe9be397f010565c9f0611827aa49167b39f
SHA512

f5ebfbadcc69311c8b5ce0f771dc6ce4bb2301a95cd27254b7731e49b2b1cf72e82a6af54d80cd718ea2af3c7be8de1568a6fbe1f858d036c4b9fbb15cb5ebfb
SSDEEP

12288:zRdNz2aiIH/tpvw2x082V0ZfrCdoegFnR/7n73QWmAkWWVEeHLf8yHK:t6aiIlDx0D2zCC7nR/77gWmAkWWVhrE3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
299a0e2f6bf762e0fe9c92bc91f00c83

Files

299a0e2f6bf762e0fe9c92bc91f00c83
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 319KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 580KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ