de206a56109c210663044ffb6ecb86cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de206a56109c210663044ffb6ecb86cd
Size

385KB
MD5

de206a56109c210663044ffb6ecb86cd
SHA1

016a3e3d708650c55a688218a12096984e23cae9
SHA256

5d2240d8a7314134dd68642da2929ae042b217251764d71820c16e73a2605438
SHA512

f3de96b0c7f51b24fb6680db35e4c952b80ac405158e552f03c460a0bf0460c433ed841518fd082b91b00d2578d3978c3234e56ab43692b8be669644c99f5144
SSDEEP

12288:iUFCTrxApFN69Yttx4vwgsp8LDydWZ26JyB:iK2ApFN6GXgsp8LcWZ2iyB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de206a56109c210663044ffb6ecb86cd

Files

de206a56109c210663044ffb6ecb86cd
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ