254b1249c8de7dd546fc237d557a4954 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

254b1249c8de7dd546fc237d557a4954
Size

385KB
MD5

254b1249c8de7dd546fc237d557a4954
SHA1

0969a8f9d9a2ef9a9df18d6cf2717699d27179de
SHA256

b0c0fcb5527e23fbb843e4001d885b66f55834d66b32629e2a9020f3bc7df254
SHA512

657500739bc63bb88e33e84da00acae2692cfb3524944eb7b525a9eef48c181e615d23e6b40afd61bcd98a2ea966f99e95c04105a39721753e4258e7c82fc5c2
SSDEEP

6144:KpxlYeEj9IxPLxymxg8StscOE/gnMDam6InZ2dlXSk/bLVujb/JRB:qlY8D3x0ScZgnMDanIMlPVAB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
254b1249c8de7dd546fc237d557a4954

Files

254b1249c8de7dd546fc237d557a4954
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ