b778dd961d4bb35336024af27e5eba42 | Triage

Sharing

General

Target

b778dd961d4bb35336024af27e5eba42
Size

126KB
MD5

b778dd961d4bb35336024af27e5eba42
SHA1

884790d94bc32c6e71ec82388f7b26cb3225bdae
SHA256

6dc81a417880c764bb08df7f9f222924d7e9b0d6129ae87d71d0b3e86246a459
SHA512

b8b7ebf75c496a526f4fe031cc3eddb403a90c7dd1b335fd7d85bc72435fe9c2b3257a78c9440a2cd9e07bb9934693b3f7e9f2576a28f6b767f70816f7865dec
SSDEEP

1536:HZaoQhY+Jc9oixka5D5xf01Q7/xp3EncujivSWO:HUoQhbW9o0katz/3RK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b778dd961d4bb35336024af27e5eba42

Files

b778dd961d4bb35336024af27e5eba42
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ