64945e0201c198d0df156e8e25c82a58 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64945e0201c198d0df156e8e25c82a58
Size

4.0MB
MD5

64945e0201c198d0df156e8e25c82a58
SHA1

2495234b2d8d69ba5c0c11e383cd58649cec4fd2
SHA256

4f1326043a213768841c40689f765fa9a68101e7aa96c67c538a4dd0106cf756
SHA512

49d1ac5d8a62f3e641eb78b3aae6a80a8add79198cb9cde78b672f22b418a77913f6ad91b131fc13e8767f2447c9f8b39b094601febc4e9ea9f71ce059cee582
SSDEEP

49152:s3WxxrZH+fnFp39r0H02MUJq0mFJy9a6uNkShS3Xf7YhFknuoOJtiu7S5ngjdA:s3EVZH+dDAb4JyShqXTYk21+5GA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64945e0201c198d0df156e8e25c82a58

Files

64945e0201c198d0df156e8e25c82a58
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 522B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 534B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 65B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ