117dfbc2e736e1959baeec2fdf12b3c8 | Triage

Sharing

General

Target

117dfbc2e736e1959baeec2fdf12b3c8
Size

1.4MB
MD5

117dfbc2e736e1959baeec2fdf12b3c8
SHA1

4516226fb1a29fb06b0f988a113002680654fbee
SHA256

205a7e8d0731a7dba221204e7dff90f7fc96c1aaf773c9efa2b7ae4982e02389
SHA512

af347bb810a1088521ece024cbef4eaabaaf409b2e2c7928262ed6b8168126ec4b9ae018f3bfae62ce211a928a7d9774572f5910b25f71ce195effed1dbba66d
SSDEEP

12288:sScpLOSKMX3DVQXjG10M0m8kJatvp373naWTjHQ+Lm/hfw6k:0LXlX3G6bM5d7Kojw3/hY5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
117dfbc2e736e1959baeec2fdf12b3c8

Files

117dfbc2e736e1959baeec2fdf12b3c8
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.khe
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE