291e3cc9e2fa742d48ff923b4dd5133e | Triage

Sharing

General

Target

291e3cc9e2fa742d48ff923b4dd5133e
Size

1.5MB
MD5

291e3cc9e2fa742d48ff923b4dd5133e
SHA1

de0f3edac61e5c76744b82583c98b7552c27b1cc
SHA256

798f0c9aa9c0afba0b5fbf41dc60965faa4729b8ee0619863f7b938e8484cdf7
SHA512

540a122a713c4020c3e8c01e8fb6fc56b384332db4c5b6da08fedd227c5e03c1ebc2a9dbaf917a02b20d7d41cec44c2d4ba41df749c03ebb1b3a7d53f4592e79
SSDEEP

49152:lrq0R07QQm8rhWcZQZdifpNo959c05Nss0d:hq0+7HpQCp89cqn0d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
291e3cc9e2fa742d48ff923b4dd5133e

Files

291e3cc9e2fa742d48ff923b4dd5133e
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 484KB - Virtual size: 716KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.0MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

petite
Size: 676B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ