1bfda6f1d8a8064af8fa52e29cdd9c13 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bfda6f1d8a8064af8fa52e29cdd9c13
Size

385KB
MD5

1bfda6f1d8a8064af8fa52e29cdd9c13
SHA1

d9dc65cedf268e3b6da3b535fafd75e43411093a
SHA256

bcbbd14509618e07db0c3e02aee0028a2ac65203dba0c8c04bb180321422fadc
SHA512

d70d5b38a94ede5fae124408c8c6a8aac03b6d0297908a7787cec40f2c3774d96f2165ffbc5c3b792e1a610e0b11dd12ddff0706fb1bc6e443c1cfebba9c93cf
SSDEEP

12288:T6O2+5ax+a5XkdvlWVkaYC3kMUjCCU40owgPUgq8Ul2B:uhRXC0Cax374QgsgfO2B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bfda6f1d8a8064af8fa52e29cdd9c13

Files

1bfda6f1d8a8064af8fa52e29cdd9c13
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ