1b5d8e997702eb061ce2ae24c968bf4f | Triage

Sharing

General

Target

1b5d8e997702eb061ce2ae24c968bf4f
Size

553KB
MD5

1b5d8e997702eb061ce2ae24c968bf4f
SHA1

152127b126ad0ee3701e25fe5103b723f6210dc6
SHA256

848ee4b6a48b9c4f98d98f87c8589563188f044754d5c51be3851b31e6aa23df
SHA512

c2d7feb152513facae09c05a5a18052e40025de95f6fc87330616b1693b32f68592a37857a9b72241ab9519f867f887aaed85303c435251b4adcdf12b20a736f
SSDEEP

12288:5na90iUM2IS03yGDiTYgdLQR5vOy0gH7jUtcvS38LCJQBtdGs1rBLsJ:5nayDM2ISMDiVInH72kS3rJQBtUkBgJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b5d8e997702eb061ce2ae24c968bf4f

Files

1b5d8e997702eb061ce2ae24c968bf4f
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ