2a99dc8f1debc256ce944814d9cd3fa5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a99dc8f1debc256ce944814d9cd3fa5
Size

616KB
MD5

2a99dc8f1debc256ce944814d9cd3fa5
SHA1

b83e439bebbedda8d2b9592c14a4d456ca4ea8b0
SHA256

81d9fc20fa9a52e63e3773a98842b1765904b4925b64773430ad1fcbc7b9fb98
SHA512

30fcd19f397f28cd55edf3d5f21f771d66eeb1610dcb3e7e50d7f3b242e532998f5f06e4a3ce79fc15e6f1502a30b6153f9f5aa0df9053984095dbd26abf4b35
SSDEEP

12288:1o//2Xxe02IE7PR3cSNA2qQFdtIyZ7QTBmG7mU7rmpFIOKUivL9:yOeRP7yS6GIySB37myrmpFIOjYp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a99dc8f1debc256ce944814d9cd3fa5

Files

2a99dc8f1debc256ce944814d9cd3fa5
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.amlh14
Size: 1KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lkoqfm
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.8hgmod
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 3.0MB

.data
Size: - Virtual size: 436KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packed
Size: 106KB - Virtual size: 108KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE