5055e02a82cb7110cbf023ea3e634df7 | Triage

Sharing

General

Target

5055e02a82cb7110cbf023ea3e634df7
Size

339KB
MD5

5055e02a82cb7110cbf023ea3e634df7
SHA1

a2fd0b2f6612cd5c3244aa06c1b28b3ae54c9f53
SHA256

ab689d5718af8acc9086f5c59ef94ef24f1303cc76f5496c80d1de1e757f45a2
SHA512

c3f475ca6583f1e4e7f442a9d6ec853118ff2841c515472690f452b3723e4d175d663075715ba9f8535a6587f01ee754a844ba9f8ef321ec91787e2dbea4f653
SSDEEP

6144:ZD03MWBS2ocy+djMEPCB7B//aDPaEbdn4QnDzsDN9MgaAp3Vo1eV:ZD037dAlJVaBd13mN9IAp3Vo12

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PFS.EXE

Files

5055e02a82cb7110cbf023ea3e634df7
.zip
PFS.EXE
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 488KB - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
README.TXT