542e81d1cc2b6a64d0c018e0886eb9b1 | Triage

Sharing

General

Target

542e81d1cc2b6a64d0c018e0886eb9b1
Size

17KB
MD5

542e81d1cc2b6a64d0c018e0886eb9b1
SHA1

83205a240eec4b032b5a61fa4333738cd928f17c
SHA256

e5aa3dcac2eb479fe316735f9885a33b5a490d6daebda4b4c55fb96b4d692ced
SHA512

0740f95d1d59beb4cecf79d474be0374b8a7f95c38441d0ee657899a67e9363601f5eaa32c5fe2d6b88355de70002aa1f3627cfddf671914349fae84cf05bf45
SSDEEP

384:YX8v9pe0KrCbRVUiy7DT3BSyXy7jcq4BlcMt0vMB1QQdp:U8Pe0KrkVUDAgy7wnBlcyLj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
542e81d1cc2b6a64d0c018e0886eb9b1

Files

542e81d1cc2b6a64d0c018e0886eb9b1
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ