decbf8c905b91b473b139840dcd7ed08 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

decbf8c905b91b473b139840dcd7ed08
Size

336KB
MD5

decbf8c905b91b473b139840dcd7ed08
SHA1

eb491144ee8f3fd6f0444a70c1bd5c2fb23d0b65
SHA256

d0688d5aeb75592db5b66855d1a487a277585732f5fe80d84a28298abb9e6a59
SHA512

7098edf8772a9043d8abe960e72b533a68dd567968bfaecdb9d4768de14e4416489e5aa033f7e896c797985201bdf35fc2bd8a74bfabc2f2478f075ecdda4bc8
SSDEEP

6144:PzKz6t7GBjG1vaQlI9ZZd1fZDRgDWVsBLM6YZtq4HuCJ6yfjBld9HG:bKmtpaQlI9ZZfZNC6sM6GtrOCLfdI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
decbf8c905b91b473b139840dcd7ed08

Files

decbf8c905b91b473b139840dcd7ed08
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.m5z5z8
Size: 1KB - Virtual size: 429KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.0xt8ok
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.32a4k8
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wtv052
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.q7v4s8
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.$cu$n0
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.trihn$
Size: - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 3.0MB

.engine
Size: - Virtual size: 440KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.info
Size: 329KB - Virtual size: 332KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE