2fab6c9b0cf66611a2017fdbe4af34947ae1d22bd842970fe0f153623d921bfa

Sharing

Copy URL

Twitter E-mail

General

Target

2fab6c9b0cf66611a2017fdbe4af34947ae1d22bd842970fe0f153623d921bfa
Size

949KB
MD5

c33f226c54e9fcb83a32e8d2e7e72de3
SHA1

500ed25c49654ed57bb0c77443e3aaef41fc2892
SHA256

2fab6c9b0cf66611a2017fdbe4af34947ae1d22bd842970fe0f153623d921bfa
SHA512

248b4d61f10c34868b3ad2bbe084cf39dd9b820a7e45748706429b7ad846472ae0a65714c6d456c9ea16c795184f6e9df79c9f4f2607e50155acc3ecbf3f5e0e
SSDEEP

24576:Fabh+2yoLY7xSoNvT0kj3OmRLZmh1xUZmRnZVhJP08:FabEL973OmdZmLWZmRZVL08

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fab6c9b0cf66611a2017fdbe4af34947ae1d22bd842970fe0f153623d921bfa

Files

2fab6c9b0cf66611a2017fdbe4af34947ae1d22bd842970fe0f153623d921bfa
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 440KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 46KB - Virtual size: 46KB

.rdata Size: 26KB - Virtual size: 25KB

.data Size: 440KB - Virtual size: 448KB

.rsrc Size: 171KB - Virtual size: 171KB

.text Size: 16KB - Virtual size: 16KB

.text Size: 171KB - Virtual size: 171KB

.text Size: 8KB - Virtual size: 8KB

.reloc Size: 9KB - Virtual size: 12KB

.idata Size: 512B - Virtual size: 4KB

.reloc Size: 5KB - Virtual size: 8KB

.idata Size: 512B - Virtual size: 4KB

.reloc Size: 8KB - Virtual size: 12KB

.idata Size: 512B - Virtual size: 4KB

.rsrc Size: 5KB - Virtual size: 8KB

.text
Size: 46KB - Virtual size: 46KB

.rdata
Size: 26KB - Virtual size: 25KB

.data
Size: 440KB - Virtual size: 448KB

.rsrc
Size: 171KB - Virtual size: 171KB

.text
Size: 16KB - Virtual size: 16KB

.text
Size: 171KB - Virtual size: 171KB

.text
Size: 8KB - Virtual size: 8KB

.reloc
Size: 9KB - Virtual size: 12KB

.idata
Size: 512B - Virtual size: 4KB

.reloc
Size: 5KB - Virtual size: 8KB

.idata
Size: 512B - Virtual size: 4KB

.reloc
Size: 8KB - Virtual size: 12KB

.idata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 5KB - Virtual size: 8KB