3949d1422a80b698d4681593f2a87539 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3949d1422a80b698d4681593f2a87539
Size

11KB
MD5

3949d1422a80b698d4681593f2a87539
SHA1

f85e635b583e299238884a2567843d8b9ac1e8cc
SHA256

a9120e11eb5ad9735634be6249d505e8e05df73f543b65a72f0615df708b2a72
SHA512

00e76723e459fda991ef2462875572f60f08ae1b2e2fac14b52bb944f5137310e380abcab4a05810f0fafb0ee598e1b2d7dfd513be48fda2344c7918b3b2ff3d
SSDEEP

192:xvxJqAPhpeS1ZK4O3CDHp1QyJXzMYu+KYp5U4ubvRxK:HUAPk21QGMn+KYpu4uFQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3949d1422a80b698d4681593f2a87539

Files

3949d1422a80b698d4681593f2a87539
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE