541ffb21c6358ae6441889c7737e2bd6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

541ffb21c6358ae6441889c7737e2bd6
Size

4.1MB
MD5

541ffb21c6358ae6441889c7737e2bd6
SHA1

d6ada3687f1c45cdfc015748b04ca62c3ab3a6ba
SHA256

634e976d1b544fb69913ff0c8aff0b35ec899e76ee2ee11d22c393718e2fed7e
SHA512

52eaf240f3a66dde4e046c1d512516eb0f81c0bc5df86f1ef5185294f1b80d8e748b5abff61e048a31a8f04553ba59ca1ca79588c266a6118f6c21c27ce6c4af
SSDEEP

98304:puhmLDE5JvNis4bkdr78VYT81YXiiqlf50yxgPMGLPgfhXo:EhccvN2PLqiief+rgC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
541ffb21c6358ae6441889c7737e2bd6

Files

541ffb21c6358ae6441889c7737e2bd6
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ