870b07378e84007d242fa94718162b3f9e263f017db1515cbf036026c0b9cb34 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

870b07378e84007d242fa94718162b3f9e263f017db1515cbf036026c0b9cb34
Size

10.1MB
MD5

009d24ef98d831314e1a8893294206c2
SHA1

c612c7c4194d31b8bcef4001f2212d682d83daf5
SHA256

870b07378e84007d242fa94718162b3f9e263f017db1515cbf036026c0b9cb34
SHA512

21f93ac2ca8d7e57bab955eb56692e7c9f4dcc57eb21379db1ffb8d608e77924aced7a937dc03c906797f331adc03f869cb0ca135c2ea6d43b9c00811453699d
SSDEEP

196608:Hc20sZjxoQs1rgrQcEW+ow2ottTWuWVVVJy43ea:HQKjxolr5c0WZVJy43T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
870b07378e84007d242fa94718162b3f9e263f017db1515cbf036026c0b9cb34

Files

870b07378e84007d242fa94718162b3f9e263f017db1515cbf036026c0b9cb34
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

_libiconv_version
iconv_canonicalize
libiconv
libiconv_close
libiconv_open
libiconv_open_into
libiconvctl
libiconvlist

Sections

.text
Size: 6.3MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 107KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 479KB - Virtual size: 479KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 389KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ