c142041084868cf94a071cfbfaf345a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c142041084868cf94a071cfbfaf345a9
Size

343KB
MD5

c142041084868cf94a071cfbfaf345a9
SHA1

12be573367f913d01131f877684404ba0a5e69ff
SHA256

df8a5f41d93508068f41e31b758db2556fd20ea0a835a7771f90885769ab4cfd
SHA512

54d8e35c652fb8f0f2ad1891a6f517db634d32f3d6b16a9234fac679a0890695eef19d9f30bc95b44cd8ab94940f018c943c70faaf43470312d940a47e582521
SSDEEP

6144:A+y2I47Yh0ExKucH+fOkEXRTrC6kpitmdD019Y7:C2I4c6ucH+fOkEXRTrC6/mdD0o7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c142041084868cf94a071cfbfaf345a9

Files

c142041084868cf94a071cfbfaf345a9
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

1a83.tmp
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Y54654GF
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DSFSDF46
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

HEHEWOAI
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BVCBGH6H
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

COMTUME
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 285KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SHENLAN
Size: 17B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

YESMYLO
Size: 67B - Virtual size: 67B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ