12ce448ef387519db44ccb255ea5fa74 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12ce448ef387519db44ccb255ea5fa74
Size

31KB
MD5

12ce448ef387519db44ccb255ea5fa74
SHA1

d39fcd4f1383649067e4a349a1568ce80992c9d5
SHA256

86eef2c18af7db6a72ad970324f10f09e59166f09886f5ec6552bcb3e62b1a89
SHA512

bc94e3f65e6a2e9b4046031d9419f97f01a69aaf7f4d835bc47fe804e5c6076dfabe4fe86c40d34cfc45e1dad9fa18cb51c806d8fa02801bb1fd7a162293beb4
SSDEEP

768:Gsmd1AsUcQVqkk/vd0T9r8xbAqLFUuQvxk5aTiFmDBwTy68tI4ua:Gsm7XQYD/6F8xAYRQpkI+mDWOSw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/editor.exe

Files

12ce448ef387519db44ccb255ea5fa74
.zip
ReadMe.txt
editor.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ