5099da3c93ccf996867fd10e51d169e7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5099da3c93ccf996867fd10e51d169e7
Size

360KB
MD5

5099da3c93ccf996867fd10e51d169e7
SHA1

83148a12c2895e4516a78a46b42840464ba8322f
SHA256

d75c595021eb13547c42a99a84d628f62e711c20d1679e843aa8ed841eed08aa
SHA512

6ef03e90a43193bc610cafe1736b72c4221cd671215cf56fed667501726f23d8fab17644de8801fec68ca578fadce1eac4141037e9aee7f0ff0e3ce912b90162
SSDEEP

6144:+HVeYNggzkmIL3E7QPQLE8KKanTOfZdmFDNS2aOpBZw9Xw:+HsYNggYmIjE7JRXCbwdw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5099da3c93ccf996867fd10e51d169e7

Files

5099da3c93ccf996867fd10e51d169e7
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ