2105882b55a46d99490d3978398c893a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2105882b55a46d99490d3978398c893a
Size

418KB
MD5

2105882b55a46d99490d3978398c893a
SHA1

2438b00387f655bfd9edf484a56a512264c4bc9a
SHA256

3fe2d600d6c14597784d4e4267bb35762658b847ccf4d2c53eb5030e88ed120f
SHA512

be17a36e2a780c796919da5fc02bbb1fd415d723b41efb3745884956789743caf6346f4c195ce6d9b0485ef68da50f53e9190957c16b32f46b5faf0535bfbb7d
SSDEEP

6144:l5+QD55PTC3lO3DdiTMQRxONPMBHttYJU1l/C8h5dQRR3gglyz:JD55bYlOTQRRxKPIHtt/dhvQbwGU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2105882b55a46d99490d3978398c893a

Files

2105882b55a46d99490d3978398c893a
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 333KB - Virtual size: 333KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ