f34ebd8aaea48b064897db1bf9528f97a9652b3813e8facb311990d9170bf2f6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f34ebd8aaea48b064897db1bf9528f97a9652b3813e8facb311990d9170bf2f6
Size

286KB
MD5

1daf7ed36319a1e11b642c3794932a70
SHA1

28b05455faa119570a5f7176b576535cbd41367e
SHA256

f34ebd8aaea48b064897db1bf9528f97a9652b3813e8facb311990d9170bf2f6
SHA512

16dd55a8a3dfa1a7eb582c6b745a076d676ade66dae0b6501389ec21287704a9a02f6b6718eaf98b88b27b1e9005378f070aa7b9fe8b2794961a717f29c56043
SSDEEP

384:BRtxiSmUjUQ/0Baxc8IcbUi+7AOut6HMf82utc2NS0zXpQT34aOe9sRS872UVTSh:BRtxiSmUj5IS0y34arSlay34abmn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f34ebd8aaea48b064897db1bf9528f97a9652b3813e8facb311990d9170bf2f6

Files

f34ebd8aaea48b064897db1bf9528f97a9652b3813e8facb311990d9170bf2f6
.exe windows:6 windows x64 arch:x64

f12299573f995fc0c70b04fabebb3e6c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

whatsapp

RHBinder__ShimExeMain

Sections

.rdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 283KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ