ffc05e96bf6148d9b2a8065e5ee93344 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffc05e96bf6148d9b2a8065e5ee93344
Size

13KB
MD5

ffc05e96bf6148d9b2a8065e5ee93344
SHA1

ab8f43fe974c3d2d8dede3dbad2089b997128650
SHA256

e8b7442ff0d2f412317d83e7abbd3ba6e56dcd104ffde65887d1091843fe9125
SHA512

e0ce26f8a8cd1b08860f117f776eb1a96867f9c5841c1c70ebe046da698ae34062cb221544b2d7f87f92fc46557cd9d5244b88f8ade670f715820fdc47159e87
SSDEEP

192:S25Of7qfsPHg6ObVSSkzrE+7pfVNXMnuLsRXnqYKZ6jgs8hEzaE1gqFMfVns9gnr:S2clPHROrwoQpd3LsKVgf1/GfVj5ks

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffc05e96bf6148d9b2a8065e5ee93344

Files

ffc05e96bf6148d9b2a8065e5ee93344
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 326KB - Virtual size: 844KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ