64fa3994e154da738ac5c9a0b79aa09f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64fa3994e154da738ac5c9a0b79aa09f
Size

1.2MB
MD5

64fa3994e154da738ac5c9a0b79aa09f
SHA1

4f0f921fbe944cb9f2fb7a1ee40dbcccf44167c3
SHA256

3e83f15f3a025f738ca39d18f1a9347e3b3c20934d21523374d475843e414d50
SHA512

551f714d10b639f739f4269d63fc71713a1f2bc02b3d521bf1bc6ff29f8182e54ce33ddf02defb5a84c0d318faaf04a0170d473a558720356de2a21dcf68de63
SSDEEP

24576:yfOyCQCkXNBOeDN2brK+JB9l5iNUUS9rXRsQl/gOL:yGfQDrN2zJB9laKpRF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64fa3994e154da738ac5c9a0b79aa09f

Files

64fa3994e154da738ac5c9a0b79aa09f
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ