b546aa4b0f049a6b1222e596e1f0c167 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b546aa4b0f049a6b1222e596e1f0c167
Size

2.1MB
MD5

b546aa4b0f049a6b1222e596e1f0c167
SHA1

a05db713eb0ef735d034a150a7e15385cd16eb6f
SHA256

96e231437468a0455faab27d23c68d4a475771736fda0a74f21ee1487babde8c
SHA512

1347a5d7f82e058febfd91ac03c854efc9cc1fe5dc0def305297fa2c916cdfa9fbddce2f4e869302f3a812bc8bf2d4cd9b2be5da085bf4946dc45f67ee9c195c
SSDEEP

49152:HBJi50umoniCnEdA6lo+/q7sAPOm79JQXlmSONi9RNLhdpFmp3iTSU0U:HBIpiCnEdA6lQpPOms1mSei1zmFime

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b546aa4b0f049a6b1222e596e1f0c167

Files

b546aa4b0f049a6b1222e596e1f0c167
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\zugawenujo\yab\xopuraxucejala\fafake95\kuwuzahi20\ro.pdb

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 15.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ