991bf807f46b198ae02549502bf2950f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

991bf807f46b198ae02549502bf2950f
Size

197KB
MD5

991bf807f46b198ae02549502bf2950f
SHA1

35922089a7f535e414ac9817926ffdbdece80018
SHA256

4c568848ac5cffa49b6b68700d329baacbc3a98dd86c4b66fdffd58e13b6d86b
SHA512

737d443a3b58d29917816671f63812106f12708d7b336aa2c462708408975a564fa76b5f8860b59aa7e20cabe8ad585f18443da6ff55fea4b3669cd647842ea5
SSDEEP

6144:4BixUnF6e5L6Oi1dI2llmI4ZVyqDQoL+kEOcs:4OUFWOi1dIolmI4ZZ93

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
991bf807f46b198ae02549502bf2950f

Files

991bf807f46b198ae02549502bf2950f
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

at.pdb

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jgd
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE