65952bc2eb54fe265cdad85d488e6793 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65952bc2eb54fe265cdad85d488e6793
Size

80KB
MD5

65952bc2eb54fe265cdad85d488e6793
SHA1

1184424a29b06baeb082dcea0733f2b295d6dc9c
SHA256

5fa8fee1c956933ecb92963de838225e42310e647f1afe68c8c6766611683495
SHA512

434bd6e7800fb503d046c8c0f357da1eb8846d5fc5a6680de7dca4e2de0954e9b4ab6be09f3cfcd4c0b285cfe9515f727f651267ed915dc619d35498c8e3b0c9
SSDEEP

1536:ZEla2jzFju7LCIxM/JUnSl5aflh6UQCWToRHaKMWLRrGcGZm:ctu7L3xMssUQXTozmm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65952bc2eb54fe265cdad85d488e6793

Files

65952bc2eb54fe265cdad85d488e6793
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ