61972f099d02b50bc3f680aa117797c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61972f099d02b50bc3f680aa117797c9
Size

512KB
MD5

61972f099d02b50bc3f680aa117797c9
SHA1

60c89fd4e9868ba42ac5901724c8107c6c01ec4c
SHA256

f5ca21493c9a70a863288a43eadb1c634a4b7ecf4d03f502d2c21a8e14cbb2d5
SHA512

376bcfb8d2afa3defcbc44a6792e0cb8857ac7cfd839cf6e96fe7f1056b3278b4ef03efe764c3d4d50e28878e62e42ab50a69d1eafd6f0bed9146a661f42ead2
SSDEEP

12288:kuThRADKeCxRh/C7DkK3dd35KyqPcyAFBT0:kwhRAVCx7K8Udd35YWg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61972f099d02b50bc3f680aa117797c9

Files

61972f099d02b50bc3f680aa117797c9
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 806KB - Virtual size: 808KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 345B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE