1fefb2ae9d2de979625b8ad67e8e9c20 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1fefb2ae9d2de979625b8ad67e8e9c20
Size

181KB
MD5

1fefb2ae9d2de979625b8ad67e8e9c20
SHA1

466d28f9e6853d156d142bfa5d4655955d74a050
SHA256

952c4799f887730f78957237b7878f94026a080d226da685c72490d9faa246f0
SHA512

d400f56fc5447c955854cb7c566d21bcf9ee77738064b25ef3e178f2de4ae980535ab01cb2f5b8a40152f36309ccf4479fec9d7c1f1d59b627751b5ee806285d
SSDEEP

3072:KWDT7sZ4i/ff3iw6cqle8rgbEpEi8zExLzznlczJws0Uhv5g+NtX:KhDHSWEaklie0zDtX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fefb2ae9d2de979625b8ad67e8e9c20

Files

1fefb2ae9d2de979625b8ad67e8e9c20
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ