fa61ff4d715c8224cec059de37167de6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa61ff4d715c8224cec059de37167de6
Size

105KB
MD5

fa61ff4d715c8224cec059de37167de6
SHA1

2b454c6437e410786af9b24dac66855a2d5fa7ef
SHA256

861e0e46ac614cb8b3a5ed6e5f95962a4bcb2e58a3ca484d2b9f6c10fb9ddcc8
SHA512

a3288d96549707a52517809a522fdf22d7a7ccc723ab1feb53b7b03a791ddda153f9a9d900333da71eb74b717c9d36cb3483b598deb17d9f3c72e652cdc3194e
SSDEEP

3072:a4Q0a8w/UDHK3VdMS2ozCHI0hgL2+DpW9i:a4Qn7r3Tp2o+HH2yWY4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa61ff4d715c8224cec059de37167de6

Files

fa61ff4d715c8224cec059de37167de6
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 91KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ