fb99b551126d59fc609865bbc982911a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb99b551126d59fc609865bbc982911a
Size

831.2MB
MD5

fb99b551126d59fc609865bbc982911a
SHA1

7e97a67d575d3c5a29db6da14dfbedacfc86bb83
SHA256

c00745658fdd54e39a7568022a28ba6e9146b3be12657a85e1081240ea8b5439
SHA512

90d5249bf844518aabc439f012a712197e06c1d18d5cfd2739ab8ec7722fd6ccee6aaa15608571fe8341eecb3b0183a942e2a968ae1906f06347047847e451bd
SSDEEP

12288:DWOd6pSglx4GtlPzCF89LY6DI03JF4EaGdj+IHm22FgCbVp/u:DGlxlfdY6ZxhqIHZCbVp/u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb99b551126d59fc609865bbc982911a

Files

fb99b551126d59fc609865bbc982911a
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 531KB - Virtual size: 531KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ