fa8f38ed3c0424a0d26224b5ac1f8f3b | Triage

Sharing

General

Target

fa8f38ed3c0424a0d26224b5ac1f8f3b
Size

697KB
MD5

fa8f38ed3c0424a0d26224b5ac1f8f3b
SHA1

ebfc7a5c267b4b39253d515b96085e5fae4221b6
SHA256

79f50f1256b58c680c1a512b0d7fef50fa86a4524f28c9531c6e6ca821dc2b81
SHA512

f8e66499fdec0431b663a823cf55fdde93736f934492d9f2a13cb63dc43248778e82fffef37c60d6805eb70f7efd5741532724a1d89ffe1711748206f77da620
SSDEEP

12288:aFK5mhi9UYzJE41VMTvmusZhe/Q+ZhnXL7mpBcdYM9IfTKsbFf4eTg:XsIzJLwCusXxm77IByf9ILfWeT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa8f38ed3c0424a0d26224b5ac1f8f3b

Files

fa8f38ed3c0424a0d26224b5ac1f8f3b
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 609KB - Virtual size: 608KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.chshan
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE