68a4619be1f3efcc95a4fac79b12544b | Triage

Sharing

General

Target

68a4619be1f3efcc95a4fac79b12544b
Size

638KB
MD5

68a4619be1f3efcc95a4fac79b12544b
SHA1

305a32c6ac58a4daec2edd4f91c7dea9f9fccd41
SHA256

acd10a5e1a34f66e757669ebc7c4edf73d8a8adf6df73f7618edcc564a3c894c
SHA512

74d8b1153201c3a9b80270145350cbb90fa8143c203c36bcb480270479298b885811a94c05a333e0d638d6a926e3457e8260c9e6ff9eac3e21e00226eee7922b
SSDEEP

12288:BHnHA3xl3nNTR/nsy53/zGMJtvlZA/vE/x2q+luR:BHHin9R/s+37BVIl8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68a4619be1f3efcc95a4fac79b12544b

Files

68a4619be1f3efcc95a4fac79b12544b
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 503KB - Virtual size: 503KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ