c140929a14baad72ff89b8c814a50d0b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c140929a14baad72ff89b8c814a50d0b
Size

860KB
MD5

c140929a14baad72ff89b8c814a50d0b
SHA1

af203fe616d2b46133bf945025a59e57f6cedf8f
SHA256

9b1cf2fac6ab059c0904fe8908e9095617878bd7f0c0bcaea324a7a46b84057b
SHA512

85de85f4beea3af413c5567823caa668888e6831d3859cd7479e14cf4601c5dee194390039e828d28a5d33998673905eb313be5bd0b1a464f01a81ec800f20af
SSDEEP

12288:iiQwxKcg5hseRwJLqEfYKzvHUiQwxKcg5hseRwJLqEfYKzv7AwSfxL/2Dc3jDLLB:9QBX5hseR8vHQBX5hseR8vkb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c140929a14baad72ff89b8c814a50d0b

Files

c140929a14baad72ff89b8c814a50d0b
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 675KB - Virtual size: 675KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ