57972c74627366e47cf89e49157afcda | Triage

Sharing

General

Target

57972c74627366e47cf89e49157afcda
Size

2.4MB
MD5

57972c74627366e47cf89e49157afcda
SHA1

2f398b1727bbb097dd53eeac5692326114ac149b
SHA256

16ec487e2c727db32ac26b0544e0fe1c2f30aeb0a12dc790c3dab7cd2a3e7878
SHA512

f075eb82de4157aeda7cd6e71f48c43c9dee474bc5b1b9113b8d0f761de596a6e81f79519be6b5d7ee0b456cc770e0bd009cc30eebbae86e24b7d08bd4264ac9
SSDEEP

49152:O35DMnCIjtAyIIM84ptsNBk9/fw2BwfmM0foCZqhaK6zbfqdl:B55O5ftsNi9XwgwfoACx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57972c74627366e47cf89e49157afcda

Files

57972c74627366e47cf89e49157afcda
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 280B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ