fcdba880c4a0917f68f91941582505d3b28e064ad961f7463bf7ada9099c2d85 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcdba880c4a0917f68f91941582505d3b28e064ad961f7463bf7ada9099c2d85
Size

1.7MB
MD5

f3e6e07aafbf786463920ca68a54e680
SHA1

e06b1d73a1f3cacaf6b47c6513974108b7460779
SHA256

fcdba880c4a0917f68f91941582505d3b28e064ad961f7463bf7ada9099c2d85
SHA512

52a52fb5433c3b728f4c3173840673eb1d12f957b6c54e106ef2f81d3eb1c8ea6b1e473c5460260a546b6147985e891349dc3d08399d2d93ce5c1c518511b7b5
SSDEEP

24576:aU50d4ecWfOkx2LFoxJbKkKF/eMNPj7TS:aUs4vWvQS79KFeMRTS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcdba880c4a0917f68f91941582505d3b28e064ad961f7463bf7ada9099c2d85

Files

fcdba880c4a0917f68f91941582505d3b28e064ad961f7463bf7ada9099c2d85
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ