ff1d0154c224c9f08b2db2b48799fc28 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff1d0154c224c9f08b2db2b48799fc28
Size

668KB
MD5

ff1d0154c224c9f08b2db2b48799fc28
SHA1

69f2ad0db1932787dcc096619a6d1665a409a126
SHA256

bd121ebc08e1da1e940fe5a2b3de40176e65bc7892d106e6e7c409877b465268
SHA512

141ff3c759a38a664d63475afe5e6d440823f751ed2a4b8d3989167de01e1a4e3c0ac5e4a17d58b1d438b3e1fbfe34e6b7abdf2a07d4dd7b989bcc20faa1ba26
SSDEEP

12288:FnvpZORUeL8+iDNdRZpaKyqFtomtrhVoBeZ/NPedkJz8O5ykoDUTXrhB1O6GZ:FnvSq+8DdRfJtrfoB0Pedk2O5joWH1ds

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff1d0154c224c9f08b2db2b48799fc28

Files

ff1d0154c224c9f08b2db2b48799fc28
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ