479749c1dbd42b86ea91517e6c946a5b | Triage

Sharing

General

Target

479749c1dbd42b86ea91517e6c946a5b
Size

481KB
MD5

479749c1dbd42b86ea91517e6c946a5b
SHA1

115bd5194b870fe416e52a26e11d0c4af8fc6400
SHA256

057f597aac739e20ea08f8bf88b1f2d2ad18646e936ea6eb3f529e070f99b19e
SHA512

370af3c2befe1017689cee13051c07d144333f56d4813ddcebe5172a6936e457f0765d81762e575e1f27d1e37bd5854949e5a043c6ef936dd21095858b4623cb
SSDEEP

12288:kDEkwb32FH2oguF4M5H496WciKibmhQdvJ9:kDouHCuFp49zcirbmqB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
479749c1dbd42b86ea91517e6c946a5b

Files

479749c1dbd42b86ea91517e6c946a5b
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.khe
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE