faf09d12cca7e12a8d8f66198b82f384 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faf09d12cca7e12a8d8f66198b82f384
Size

82KB
MD5

faf09d12cca7e12a8d8f66198b82f384
SHA1

fba5461e90cafb7dee4991a94c742491fe697e86
SHA256

0e89b6e77ea104b199289e7ae869822a3e177c0b96d1b8a4d99c87a6093fb99a
SHA512

31d31f9383c47efda3247129faff71637a5dca8b59407e38c9d84a62be4134f01ecfc2508b6e98f03c025a3cb1d657fc3391ed4c216e71e209208c38fb66f19a
SSDEEP

1536:KBRxpX0y098hzJbpYWcrQISlp/hpP+GxDcd/xd6AcrdmwQ03VjzHv8:KB7pkf98hzHIZSvHPdDcdjnc8h0lv0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faf09d12cca7e12a8d8f66198b82f384

Files

faf09d12cca7e12a8d8f66198b82f384
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 90KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ