465879ed99c3e0f5e5a1eee70c6c79d3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

465879ed99c3e0f5e5a1eee70c6c79d3
Size

27KB
MD5

465879ed99c3e0f5e5a1eee70c6c79d3
SHA1

e0ab3e78df3b016fe34b80bd379b5d6025bc4f8a
SHA256

dd1d97eaadef9bd886c3bbb61e03ad450339b5986c9680daf39477354c052247
SHA512

91206f47fb4c5389ffb47eb7d1de22e16da1d15004427bce8e406f057cea80d7ab63fd252068991ab3fa205fbffc4c6cf02f94611fdb750f884952f4acd4e901
SSDEEP

384:wM3wIA7GjPE6nnP9TDWsKAkk/fG8+lNJP+0JSfgyzK:NwIA7Q7tDUAdneNJVSfgN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
465879ed99c3e0f5e5a1eee70c6c79d3

Files

465879ed99c3e0f5e5a1eee70c6c79d3
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

WndProc

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.spm
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE