dfebe16d3f21600232a7f4562b40b0ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfebe16d3f21600232a7f4562b40b0ed
Size

28KB
MD5

dfebe16d3f21600232a7f4562b40b0ed
SHA1

ad10fd98096fc2f67c718cbae1c18fa7275a10b3
SHA256

7bfc4e7e320187f134b5637b73ba20f9daeafe9b46eb2690905f9854869351b2
SHA512

a4c1cdce9b634485f5098ea825a1cb7d91b75ee7ed7147726d206be607db66b8c59e1bd5a077ec8024bee2479239ab4625f9d56d4b2a99408d09d8161d564384
SSDEEP

384:MP5UcZCtrcOh9TNGkjdMDu1hUpjCW4a1ya8oZ0c3SvhP6CTFQBvHInM5//:DcohP9NGkjdMDu1SxEaj8JRQBV//

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfebe16d3f21600232a7f4562b40b0ed

Files

dfebe16d3f21600232a7f4562b40b0ed
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 421B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ