dfaa11fe02f8d06b5cdcb8149251b708 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfaa11fe02f8d06b5cdcb8149251b708
Size

85KB
MD5

dfaa11fe02f8d06b5cdcb8149251b708
SHA1

0ff979e429b5dbe5aa69e03a81fe845a1affa274
SHA256

a190985177e274a53a6e2edf4ba99e5811632fa6d8f2e8e58fedd34b1a49f4c3
SHA512

49ff106e383b043fabd9ec5845528708f3cb281ce2c89fd0e82565b6967cea06cca68b537f7cd75280f70ce2a88c94f24a934362b35b6b20a4ed74841a5aa0b5
SSDEEP

1536:1Ye84YX9F2MzT+7sPAwOb9gR9D4PjJONrSA7dVZVrk7rOhnj58w:1NNCL297sPAwOCbD4bY1vFwOR9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfaa11fe02f8d06b5cdcb8149251b708

Files

dfaa11fe02f8d06b5cdcb8149251b708
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 337B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 830B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ