541fe229166de55027df3929b06d883c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

541fe229166de55027df3929b06d883c
Size

214KB
MD5

541fe229166de55027df3929b06d883c
SHA1

413fdfa21b4af17147037cb0da8e9c06bf19535d
SHA256

55be17d3095f9852783f61ed237fae776fdbf3dc752dd6d3b0fc6a92215cdac1
SHA512

43efa41a80a3fc3523b8c4ccd32464c25988dfba8815977d6c88b5bb59a8b52add70f57e8673a8e7c1a99ff0c28123874e1f46d108ae0bd460aca20fc89e3d09
SSDEEP

6144:ELWkty4tYGONDsNIj41NDM1jUEmqkZ/R:6WZGONAo4rNE5kNR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
541fe229166de55027df3929b06d883c

Files

541fe229166de55027df3929b06d883c
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 97KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE