1c44996c6a1a06f1ee79f8e458e1a0a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c44996c6a1a06f1ee79f8e458e1a0a9
Size

270KB
MD5

1c44996c6a1a06f1ee79f8e458e1a0a9
SHA1

21b0a89f131dae5a9fdbbcfdbb49d49c75bf48fd
SHA256

2373ce9c54d8658f40b491f8e63cf677a8d190930a73690e4ef6171e888c0d54
SHA512

7c98f5c97c8197b935c3d83028b1f37f5940a03992e56a4f428e34da87ae2932f5946694decd9b0f795cbeeced9b60b845413ae6c56fa43ddd97b94766f11ca6
SSDEEP

6144:QLwwEceqod6dc+cXJbb8n+gCd1eMvq4x1sprNnx:QEwyh6C+cX5wMC4s9Nnx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c44996c6a1a06f1ee79f8e458e1a0a9

Files

1c44996c6a1a06f1ee79f8e458e1a0a9
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.khe
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE