fa020e2a4d339e6017d98f9b8220a6db | Triage

Sharing

General

Target

fa020e2a4d339e6017d98f9b8220a6db
Size

105KB
MD5

fa020e2a4d339e6017d98f9b8220a6db
SHA1

f041fdc831e51fdc8b67f83f4c8eb46062720ae4
SHA256

bf55aa4908a0ec16c77f9a8db84bac6fba0b395f42265e57bb228694d7ba0d24
SHA512

a1949b6cf07c0360b77ee77ec9b89e923869a2e863c084e67ace773f782715a90a5eb39dd840c82fef75d27fa8dec000db91fcc95d2bcf204b6e68b44b58f401
SSDEEP

3072:ox60PMI8XwLji/JDoVmulsTv0i9X3kuJI:RXI8XI7cOSo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa020e2a4d339e6017d98f9b8220a6db

Files

fa020e2a4d339e6017d98f9b8220a6db
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 68KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ