ab676a99a1fd153d8cce13ac09486968 | Triage

Sharing

General

Target

ab676a99a1fd153d8cce13ac09486968
Size

385KB
MD5

ab676a99a1fd153d8cce13ac09486968
SHA1

4bd758080cdaa25580c82cc02d8e9c4be6f3aa94
SHA256

214b0155b708a6273bba5c3d2f9343d69c1d3a41c7fa4a5d4e9ec52203e2ab98
SHA512

0a347627dd7e6dac502e874e7b4af191a97cb19c74ec4e8611e878cb06d8b9b919349644fa6c47f87c32937242d226bfe1a839d33ff5ad16b269881917074253
SSDEEP

6144:oWO6kapvbsmTtC/JzHW/2IL75teBRx4ZKxA8HRUd076tv69H9XN4B:w6HYmTtIpkteBRh6GRUm76tv63eB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab676a99a1fd153d8cce13ac09486968

Files

ab676a99a1fd153d8cce13ac09486968
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ