798a9be23660bed0dd4984232b194515 | Triage

Sharing

General

Target

798a9be23660bed0dd4984232b194515
Size

20KB
MD5

798a9be23660bed0dd4984232b194515
SHA1

882f5d417194f06f9e5e122009652158f5f22a7b
SHA256

ecab05e109e40e844336797ff670ead982aa0e20f48814e21ab3d6aaa1d53e34
SHA512

23357036345fc7b8454093163f728146d084f813c17f1e521893bbf16d957229ca7188723546e5e115fc2c4316a43686a5cb8e122ac6809fb56b2c08a82f5b6f
SSDEEP

384:Gv58ckQceZxSaGcpw+uPeqSsLi6mXR8rolHrU:M58H1IxFG8wNPPLikroq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
798a9be23660bed0dd4984232b194515

Files

798a9be23660bed0dd4984232b194515
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textH1
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textH
Size: 603KB - Virtual size: 603KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.textG
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ