879012a674dad4261bb7285847cc85c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

879012a674dad4261bb7285847cc85c2
Size

308KB
MD5

879012a674dad4261bb7285847cc85c2
SHA1

571212e621ed5d6d217156fcc97b17144345091b
SHA256

4deed62a149a3a18f69e6d96dc2dd69f33a0f75947371c251e66c4433a607cef
SHA512

5c749b12ae4d1cdab651445f35cd9b85371bfcdefeb1e5c47e404037fb0ec06c4586411aa90cd69694e1151b5b1d86b1d04575b33f2176e6f4d7c8a5f9f512d0
SSDEEP

6144:CTQo/jISdt81HAB4anzyc4E7BYQRW1sp4G7rvKc9rJ:e1IGtks4an4YPWiD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
879012a674dad4261bb7285847cc85c2

Files

879012a674dad4261bb7285847cc85c2
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 148KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.VCrypt
Size: 70B - Virtual size: 70B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ