1cb799575ce534fba084805e3a71c280 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1cb799575ce534fba084805e3a71c280
Size

491KB
MD5

1cb799575ce534fba084805e3a71c280
SHA1

b73863b537fcc4a32f4fd2ad3bf979bd0c57fb32
SHA256

ac7339da36f580f348fa89e5dae9bd295730c924f7387e48cab9eec336dc8b2b
SHA512

c4d67705a50a5c480d8b26fc7913f6d2caccb0caf5f8dccbd62a84ae15794cb51042b24bed03f74337f0e8933e513bfa1208b0c61a7cddc9baecd175284fcc7c
SSDEEP

12288:kEYdy4FInYccQEy40dHIKRmr1lKtF+PRTEtsU:NCpInYccQEy/HIOmZPRTEts

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cb799575ce534fba084805e3a71c280

Files

1cb799575ce534fba084805e3a71c280
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 418KB - Virtual size: 417KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ