5af14e63a973980e1ccb2a6b566c0aaf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5af14e63a973980e1ccb2a6b566c0aaf
Size

344KB
MD5

5af14e63a973980e1ccb2a6b566c0aaf
SHA1

8259a89124ebe6ecc827765bc503ed333ed356aa
SHA256

00d5807ec0f3fe6dd52e9f3ece6f8703950af0f6ea4934e056a34fec9ec8d99f
SHA512

d2ce4bbed143659f0442bc77d3e170e2554b8a809ad9543a17f728960fba1295cfba5ebcb555a9df0a6ace7fe752d210edd75f30bb66420b6d767b51b3f5c707
SSDEEP

6144:irH8dE8NUMcis6z13FLMb+oQHDyTM7OMYch+Qcn984ZeliVd67tQT6U:irw1NUMcB6hFLzoQJOM9h+195ZeQ/wWn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5af14e63a973980e1ccb2a6b566c0aaf

Files

5af14e63a973980e1ccb2a6b566c0aaf
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 820KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 307KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xiaohui
Size: 111B - Virtual size: 111B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ