541fcb4930658af381e24f5189ccf4a8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

541fcb4930658af381e24f5189ccf4a8
Size

420KB
MD5

541fcb4930658af381e24f5189ccf4a8
SHA1

7d183e95db65c2c0400992ad1ebedad17d55a344
SHA256

d89726d52c904431705e12604eb83dbf7e0c6925bc0f92c7f9cc94c601eaa6ba
SHA512

08e27c51a1caa86190bc1e246e97044f72df02fc57318db53013af248b6e865732e5da11cb6c8c707214b673c24aa63e0a9b97adae756804d27c679e26e9b899
SSDEEP

6144:ykB1INZdWaFzaE7mDGg7Y4+MFyBPys80G5sEOi9Ri9na5UVx3T:ykBgdW/E7mDGg8xMkBp80GiZa5UVhT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
541fcb4930658af381e24f5189ccf4a8

Files

541fcb4930658af381e24f5189ccf4a8
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 262KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ