b675b8fa7bb4f8ce4bef591c0d903519 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b675b8fa7bb4f8ce4bef591c0d903519
Size

486KB
MD5

b675b8fa7bb4f8ce4bef591c0d903519
SHA1

de6887b7fec5b4512bf0a3c8b2c4aa58bc882146
SHA256

e4b7235fd9db89c3cf5a6a771af4b2490b210ac6fcb697169d4122362078f9c8
SHA512

c287ab5d0f5d7ddf8a0434b7a73f572c4617b42b8e7a4496951ee7f63e5be2dcd6e3028a1a026ca8e8cc9910e1e2f9fd6ae53bf602b2e0abd0a85b84425e9af2
SSDEEP

12288:RSE/hVppUWbAKZisLVarTGVloeVzBLW/IW:hAWUubLwuPouzBLsIW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b675b8fa7bb4f8ce4bef591c0d903519

Files

b675b8fa7bb4f8ce4bef591c0d903519
.exe windows:5 windows x86 arch:x86

ec62a974e64d1932f0ccee0a00acb594

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32 kernel32

FindWindowA �Q

Sections

.text
Size: 44KB - Virtual size: 71.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 412KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ