1fe992fd5d8e4ea6b2cc56d77aa74c09 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1fe992fd5d8e4ea6b2cc56d77aa74c09
Size

1.3MB
MD5

1fe992fd5d8e4ea6b2cc56d77aa74c09
SHA1

7bf57472b269f403f68e78c7bc6644ca3b1a2184
SHA256

f62c2d0bcdcc4947b6310c673e745fe90e846d4c1d12a674d6832cb8b7159e0f
SHA512

4c68e31b9e477c5d1aff87c1659abe9fead54ff2330d2e69fc25671a09819860bf10368fe0e975d5963e9dd2b144acfcb08fd5b8354c70d40951931ede143568
SSDEEP

12288:Ch/pCHxW4pbAOeeeZeeeeEhMEr6CX4zistT:U/eDNAuaE6ti6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fe992fd5d8e4ea6b2cc56d77aa74c09

Files

1fe992fd5d8e4ea6b2cc56d77aa74c09
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ