886673e8de70921d56d2abfa34a0d6fa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

886673e8de70921d56d2abfa34a0d6fa
Size

492KB
MD5

886673e8de70921d56d2abfa34a0d6fa
SHA1

96167708298be76f9c8128ac38d749951a5c8cec
SHA256

abe79b8dc0540aa2b0ac28d38a6c25342c5714f35ebe07fff13791fb1ca1d465
SHA512

3eeb5ab6d829bf773ad85776ba71d75c11ce2d382b54a9c414a8b03aff5466c73fbd2ac1149efaca12503bb1b3891d6e06fa0f3740088c107c6a1031504613b9
SSDEEP

6144:Vg3d2kFSt+Vb/u6qZ2r+VN4SuGJLIMSrQhf9uwMg2aGiZApsSj/hWWTFaWTMbAPX:/kFR/5qQKEXgSchVung2LpsSrcWB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
886673e8de70921d56d2abfa34a0d6fa

Files

886673e8de70921d56d2abfa34a0d6fa
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\kkkkkkkkkkkkkk\ALL\z\Get key Activate S - 400 RAT v1.0 By FC\Get key Activate S - 400 RAT v1.0 By FC\obj\Debug\Get key Activate s400 RAT v1.0 By FC.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 462KB - Virtual size: 462KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ