c3119752d8712205a0190ca6db9d0989 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c3119752d8712205a0190ca6db9d0989
Size

1.1MB
MD5

c3119752d8712205a0190ca6db9d0989
SHA1

c97d0b74298b5e2f05adb7bdafb3761f79af7965
SHA256

f3ed461c87d84cd22377f99b015fc3c93cc7c04d288531060f38b6a87a108ecb
SHA512

6aca5af157aa6da2e37a640f146dd17645b9f0140c6fe14973fe371589856bf762aa371638ed3c4ab4dabe7c948d58e5960bd08021ba8e4a64f0f177cbbfb027
SSDEEP

24576:QdiRt1XNnlWLk3fE6Ehg7mM+M6RkMkIM7gE6Eh67W:SWZ0g7mM+M6RkMkIM7I067W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3119752d8712205a0190ca6db9d0989

Files

c3119752d8712205a0190ca6db9d0989
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\dbs\el\oc\target\x86\ship\postc2r\x-none\setlang.pdb

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 300B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ