fb9af4e9049acbbeaf476df0dfc5bc3568e85b54c444be6801cae9f2eb53a078 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb9af4e9049acbbeaf476df0dfc5bc3568e85b54c444be6801cae9f2eb53a078
Size

472KB
MD5

d339e0f7f20d8719d6b1f35ed3bd8f93
SHA1

6bf1129c977e63a123afc86171bec5ac6f58e6d2
SHA256

fb9af4e9049acbbeaf476df0dfc5bc3568e85b54c444be6801cae9f2eb53a078
SHA512

2fd6625a63276249fda72c757f7e8f5a76c07f3ccf56cfb5e2dc2f9ec60e0cf9f9768ce9dc73f17cc9164d7a0965e1f38f8e148072e6737600f64d10ac73e837
SSDEEP

3072:8R8RinudiP52xx67lLdeiHDoJRlSa4nmX4iJFOkktaBUfClil9ifU:8ekgiPA6RIPJRcbmNXktahlY1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb9af4e9049acbbeaf476df0dfc5bc3568e85b54c444be6801cae9f2eb53a078

Files

fb9af4e9049acbbeaf476df0dfc5bc3568e85b54c444be6801cae9f2eb53a078
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ