299a2dd6e4c4475de726608efde352c9d87a28e05621f47d129370e374597a05 | Triage

Sharing

General

Target

299a2dd6e4c4475de726608efde352c9d87a28e05621f47d129370e374597a05
Size

388KB
MD5

eda4f403974247d5985ee00a982bcd94
SHA1

743d660d13db67cd8c50a544879fc895cab04284
SHA256

299a2dd6e4c4475de726608efde352c9d87a28e05621f47d129370e374597a05
SHA512

261e144b35417f890b503bc59b1c0033e3bb8ee56516e698878efa98dcab8fe8dd6c42522d4f762db4e87d2254252c1bd902e724b55def2ad12bf86caab72138
SSDEEP

6144:ohjxrU2+7kO+4LT9FD/Q9VkcpFMcEOkCybEaQRXr9HNdvOaKC6:ovr+M4H9FrYVk1Okx2LIan6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
299a2dd6e4c4475de726608efde352c9d87a28e05621f47d129370e374597a05

Files

299a2dd6e4c4475de726608efde352c9d87a28e05621f47d129370e374597a05
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ