391e7b0374eab050ecff69497489bb59 | Triage

Sharing

General

Target

391e7b0374eab050ecff69497489bb59
Size

385KB
MD5

391e7b0374eab050ecff69497489bb59
SHA1

ac7deae935d4aaa39039d4d68c0f1f35f76c982d
SHA256

e0a2e7d0b8b98d160aaf8ca7e769f7878f6293b076812bc31aacbdf44c3ec21b
SHA512

15a84b54bd1b7e9cc26144a9ae1d47803406079ba4b0e6d8816bac6f55ee5233028056b00fb1bfcacc027f548c2b1d3a97143be4865b0837bdc0df69a738bcb9
SSDEEP

12288:hiaNu4LlcD4AubvP5azud2urNKVA8/DmW7wB:UKu4ODycuc2NKf/DnsB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
391e7b0374eab050ecff69497489bb59

Files

391e7b0374eab050ecff69497489bb59
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ