5af49008a5c3ff141317d9ef06bf0968 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5af49008a5c3ff141317d9ef06bf0968
Size

705KB
MD5

5af49008a5c3ff141317d9ef06bf0968
SHA1

fcc7a9d49c7f4b71f6a5ad9b86c27f9d1e15368f
SHA256

560bda04ae957711047dc07b18d73238a8a4d86bd3e60817356b03c5913baeb3
SHA512

3a4ae06e554fb987f0ec7cbdb7c25d975756be78b167c04d9e3cc578a1ed4f6f9d42945bd85a2451fed0407c881098dd52e3d6f6e5901eda26ac9688c8295ffb
SSDEEP

12288:5na9ciSfSUVav4CZXZKXiajccPbSPUtcvS38LCJQBtdGs1rBLsJ:5naar9VagC+/ccPbSakS3rJQBtUkBgJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5af49008a5c3ff141317d9ef06bf0968

Files

5af49008a5c3ff141317d9ef06bf0968
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ