b9f2a1cac1eeb571fef78e6b1c000270 | Triage

Sharing

General

Target

b9f2a1cac1eeb571fef78e6b1c000270
Size

460KB
MD5

b9f2a1cac1eeb571fef78e6b1c000270
SHA1

38c013f81b3a40208e27b3defc6baec802fc2f81
SHA256

dce6e90e27b2b14e5e33f9085c2c51235fb957db0a88c971cd3dc65265d7a198
SHA512

563e0d094739a503ec5b2b15c6aab5544653d214517fef0b19d7bf1b9cba5199d68b981175a772e235923c7e1ab5b940f1e95f90074631fa2d342acccc830867
SSDEEP

12288:ZwTfJOyl0noVIo38GYg1W1O5oGmzkhMf4wZpqLj:kxDl00IoIgxoGmzkspqn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9f2a1cac1eeb571fef78e6b1c000270

Files

b9f2a1cac1eeb571fef78e6b1c000270
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 170KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 60B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ