fefd01994d861d92186720eb4848e649 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fefd01994d861d92186720eb4848e649
Size

512KB
MD5

fefd01994d861d92186720eb4848e649
SHA1

ff9a9ab71e4c03c3c95922980fc5ec6829cc9501
SHA256

635ead6f0339796f68d73ffee09dc720caea9b4026ec1f01c4f7b2493c315542
SHA512

77e215a10fe1a44abd56048652a17f516a25c54f451181fc096f68aaf1b3031a91e9cea5372661ac4dc5288280f8eb1b0cfad558bc34a9b9e39415662e8159cd
SSDEEP

6144:mJ7prtUGS1d5DM4yurXUjmbtUi7KfowHt0NqaLxaBO1wJznItBFr6ZC/4HWWdvPh:mppB81nAgXimui7Kf8ZjsWWdGoLF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fefd01994d861d92186720eb4848e649

Files

fefd01994d861d92186720eb4848e649
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 803KB - Virtual size: 804KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE