1b9994db9bac789f62c260c26d3bd6b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b9994db9bac789f62c260c26d3bd6b6
Size

653KB
MD5

1b9994db9bac789f62c260c26d3bd6b6
SHA1

b0571e2f6a81af1e46b425c411b00d36ba6c123b
SHA256

f6ed1677adeb1308e5a117991d645a48d3aa582952037504d7d9c3f72192123d
SHA512

383b3770f90c779808dfc6a2e4dd0169849b8f2800826a6a2e247c5e5af1570183f258425c1bf92ed73a656a97dae3fbace13972bba1345c082d915137fdc7a2
SSDEEP

6144:nEvttEZLY7xACEL/Ubdy9RNgShcHUaXv8WVXhObxjYNedcWipCbLWgmncsuk0X4b:EUJCACm/UbbvUa/VxObWN+HzmnozVjO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b9994db9bac789f62c260c26d3bd6b6

Files

1b9994db9bac789f62c260c26d3bd6b6
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

petite
Size: 325B - Virtual size: 325B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ