df68bba606f09d046ebd26c588da070cb0f53c487a89db0bf058da94814f1fc7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df68bba606f09d046ebd26c588da070cb0f53c487a89db0bf058da94814f1fc7
Size

274KB
MD5

385538720d638ea0cc803535b4402a45
SHA1

5676587432a7e0fa60d9dcbba34379dc465a4ccd
SHA256

df68bba606f09d046ebd26c588da070cb0f53c487a89db0bf058da94814f1fc7
SHA512

5622db118da7b200e33b426e109f6ed328d6bc37d8356b5f584736f7b53cc541103749fa291fa6201f27fb06857e9e78d831e1368979614f180965ee9c353822
SSDEEP

6144:bzkmIL3E7QWvheX0LuMPNsiKrhnVCRwS/bSiAg54UBDudb:bYmIjE7riJjnIbdFQF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df68bba606f09d046ebd26c588da070cb0f53c487a89db0bf058da94814f1fc7

Files

df68bba606f09d046ebd26c588da070cb0f53c487a89db0bf058da94814f1fc7
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Perforce\FRMain\code\build\win\results\Release\info\arh.pdb

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.tqn
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE