139698075da7e254ed1ba8c52a60370e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

139698075da7e254ed1ba8c52a60370e
Size

716KB
MD5

139698075da7e254ed1ba8c52a60370e
SHA1

b6489440fecd4b9cae962a7ac95ed450bb33a703
SHA256

52037c4b7ff6bfaa6842c764de952af9c8c5e1d8ec9d13e81d59487b607d9402
SHA512

db94bea030985c78e1b87d87e19c03dbe3a2cbe7ca1f94c2c72ea7c019cbdbec85b65453f525c0e49910657c2406fbf11eefb30d96f06dbf646f9b4aba725f34
SSDEEP

12288:+Sd7i2iONBlkmxJqQoNWIqRDVJBDdVj9zTToNY4L:hd7uOT62qZqNBDdvXTSD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
139698075da7e254ed1ba8c52a60370e

Files

139698075da7e254ed1ba8c52a60370e
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

Size: 138KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8.8MB - Virtual size: 8.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ydcmkwqv
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lxhbbnuw
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ