8afbab2a6bf9eb9e81963e1c4f916950 | Triage

Sharing

General

Target

8afbab2a6bf9eb9e81963e1c4f916950
Size

6.2MB
MD5

8afbab2a6bf9eb9e81963e1c4f916950
SHA1

8d8944e98092a317ed67f710c265d5e68aa5dc23
SHA256

e1e01f5b30c4578a5ea488f3010490b4607c4afdff74dfcbfec52f1d0576a8e5
SHA512

b51e9fb4a75d1c1c18a4c94d3a3626b8b8352df4df3756a1ba1dede57b04fc19944ba765d4db8bf21c7342f6417d16f8c4c05da7d3d82a00a74303116f29b520
SSDEEP

196608:gDwXAdS8doOQzrHxmQ2/6F5Lk9WcBKFvY9r:s7dSrMA5Lk9Wc09Y5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8afbab2a6bf9eb9e81963e1c4f916950

Files

8afbab2a6bf9eb9e81963e1c4f916950
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ