ff790d152491eac690773698ca6f6b3b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff790d152491eac690773698ca6f6b3b
Size

1.5MB
MD5

ff790d152491eac690773698ca6f6b3b
SHA1

721188e4d8527b621f40ef9a807152ae1b4d3458
SHA256

dc7b15cffcf0ba25c96f6ab9605f51db6dc0afa26358dcd822e0e00b9f0c2a49
SHA512

311174172822a3439ac1c4aae47cf30571bf3dcaa904508017c09f58eb6a3aa08cdb101842d23c419decc835eaad15a67a7bfae1ee72ea8f1973add44a37161d
SSDEEP

24576:FlCxqMOITOxEYvuU0piTVcukWK5g6BmRRBBb4j49/9NSSpM0uekHd0uyARqFxN9e:FlCw1I6SYmU4uVcCK55MRBE49/9NSSWL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff790d152491eac690773698ca6f6b3b

Files

ff790d152491eac690773698ca6f6b3b
.exe windows:5 windows x86 arch:x86

9d09a84e8b6e6b77e57e0bc22d7045e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32 kernel32

ImageList_Destroy �'

Sections

.text
Size: 724KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 736KB - Virtual size: 736KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ