11b679e77be6d236f320f7e0dcb383f2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11b679e77be6d236f320f7e0dcb383f2
Size

345KB
MD5

11b679e77be6d236f320f7e0dcb383f2
SHA1

950b88a2740dc2a0da8042c378bac41bc49b59b0
SHA256

8615655c80307dab96e5d324afa180ac95ca767a7d4902ab55c7ca873005c954
SHA512

c613294afc094f6f459a8bc354fd032c9cab354dae6faa655ec09d74145ff0a10456fa29e553e042662e31ba4b001c17e1256d22b195fbf9e6d03132c586faa8
SSDEEP

6144:O6qLI2+V/hkKT9dYYZVVI/kRgz63zz6PD2TrckYB9BhVY1vmTgw+7K95:ORl+VZkKZhgvzUIDIcn9QyTUm5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11b679e77be6d236f320f7e0dcb383f2

Files

11b679e77be6d236f320f7e0dcb383f2
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 13KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DsNiu
Size: 344KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE