ded0cca7242bd3c3588f2feb1d944003 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ded0cca7242bd3c3588f2feb1d944003
Size

191KB
MD5

ded0cca7242bd3c3588f2feb1d944003
SHA1

f32c89025e24b95e32ffddbdbb656a91150f902c
SHA256

ade8c232b532ef6eaa5fc523221ebbfa7c05091c4d4bfec354379e643a55ede0
SHA512

051b7e49ffaf8d247ba6e5ddf5adf1fb15a9475565f26a851c4c88ace863b0d4588b2a12e990a98f5a9c92591fa8c4abbe639621d0faa4d7e930999d041ad61c
SSDEEP

3072:NzPqrQ1JZTStgTwU97+BEXPRMfBSuYFYnes2BvhBAxIci2uPc8tTBfHax:xqrQnZTagV7+AIStWnm5hcyrtTBPa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ded0cca7242bd3c3588f2feb1d944003

Files

ded0cca7242bd3c3588f2feb1d944003
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE