5af1edfa41a4b4e86b2be343b60e3279 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5af1edfa41a4b4e86b2be343b60e3279
Size

4.3MB
MD5

5af1edfa41a4b4e86b2be343b60e3279
SHA1

a0d0709ea2a4bb03208dee397fe1abc3d9d37abc
SHA256

d120f4b58cd506f929b84f43399c79ca74557c029ccab1aaf2b89611bb1cee7f
SHA512

736e7399bb9b9043f8d322171ff59c7e29123f8d4c3a6c39fd98291c4c0727439c840e3eeb40880383f3e2997cf3de3d30c2bde5ba872de42edfb71369bd8a57
SSDEEP

49152:S5fkpfLsAv1QeQkBiUj9zeJdyNftaAgZaOt7n1wiiZa9SJHDeCvEB+EU:S5fkpoB1jJ4t89ZwiiZaUJjpEBZU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5af1edfa41a4b4e86b2be343b60e3279

Files

5af1edfa41a4b4e86b2be343b60e3279
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 934KB - Virtual size: 934KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 36B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 628KB - Virtual size: 627KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ