5542ca1af45a1569a64400044d51ffda | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5542ca1af45a1569a64400044d51ffda
Size

669KB
MD5

5542ca1af45a1569a64400044d51ffda
SHA1

fcb6c842eabfba9eb63ec50a3f80953b3159a8d6
SHA256

5d680a48665c7f01b4fd16760fe7761c4c3f47d68e2c76c75c93f920b18a21af
SHA512

82b893886c641a33ee10ba679e493024614fc98b0762f8ba5762a5a8cceb4739a5b4527aca5b5fe576fdeac45432fbd8609d43637599fe9243885d74def8c08c
SSDEEP

12288:5na9yiUiNMhg0UU6bVaaDaoEIp2EK2/mRktcvS38LCJQBtdGs1rBLsJ:5na4LCHU6saNpHK23kS3rJQBtUkBgJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5542ca1af45a1569a64400044d51ffda

Files

5542ca1af45a1569a64400044d51ffda
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ