144b954dc402baa1ccfe48b01e3779a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

144b954dc402baa1ccfe48b01e3779a6
Size

436KB
MD5

144b954dc402baa1ccfe48b01e3779a6
SHA1

2a977f2b31b36ac59bcb122c055899c46840e431
SHA256

b4fd4c9bec719d674491832d4308b8c5f0defa70cc9a73d30be3329fd4c81a68
SHA512

50fbb999dab34e79b9e966ac0d969aa948086b2d09ea131c212cd3afd59571eb79489c09f6ddce1c92da5015211cee62109e549d93d0817dc75c3deed8f84be9
SSDEEP

12288:ucc//////JDHexP21cxo68f5yPgjoZO0f1wTmhp:lc//////JYP6cZIjoZOIwTEp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
144b954dc402baa1ccfe48b01e3779a6

Files

144b954dc402baa1ccfe48b01e3779a6
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 394KB - Virtual size: 394KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ