5022f9d6188940a20087e472e0739cde | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5022f9d6188940a20087e472e0739cde
Size

185KB
MD5

5022f9d6188940a20087e472e0739cde
SHA1

20cbdd4fc5b5963b97979e6aca428518157e1d16
SHA256

e203087afff361b2556366547482b845564805ff8f1bed603c75c852ed73c651
SHA512

5202dea310dc10a8607dab7279b5736a7ed206d5367f552e7f8f6eb7c47ab237dfb364c52216e6891e3b10a30ad2c9708306e83eaa979db3332f0245865112a2
SSDEEP

3072:c2kOsXCG3Mrpw1NqBcLqmEGnfYuDgLhNLUBjFbDHa:cl9CaMaucNfYrdNIVa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5022f9d6188940a20087e472e0739cde

Files

5022f9d6188940a20087e472e0739cde
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ