ff1f67dd11fa1354bd3b116148add031 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff1f67dd11fa1354bd3b116148add031
Size

364KB
MD5

ff1f67dd11fa1354bd3b116148add031
SHA1

427bf4cae12c3ddece4715936b1fdeac30ef66f8
SHA256

e6c44112019abb034301884c95d99596267a4a332afa53a319ddfa485e2e12f9
SHA512

01f2225933c7a80c74d0876be05f42e1d337ee442fa7d8b77c28984b3e38addfb2e00da2b6afec9c85e2b06721909df4b9009a30ec506e9f58a3bc197422f63a
SSDEEP

6144:DudvYQsjDoA+/MzRdP+SLC4fqcUV3MVwIdwufZLfgmRbZ:KdvYdvoAGSLC6qceMldwupXNZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff1f67dd11fa1354bd3b116148add031

Files

ff1f67dd11fa1354bd3b116148add031
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

twrp
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE