dfdcefa859859b8dd75f241d26c64eba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfdcefa859859b8dd75f241d26c64eba
Size

1.9MB
MD5

dfdcefa859859b8dd75f241d26c64eba
SHA1

93a0f512718885e0e6f44ab281a72b41e13122af
SHA256

a50e061551fa1a21feeb370591e50fb11655733961f60e05a23d2159438906eb
SHA512

b6970c86d88ab1485368c567940a6399a8d4af27d5e0ea582bdbb407ab6c759f6c86c1fbef5a7224546c6691e887cfa1db075772625d4a836858cbf4e7d4b8d2
SSDEEP

49152:HOByZ2k0lcZEZRsIQUZ1298RZqNEY2K7+/eHqR6Za3vBoluMk:u0Z2SCZRsIvS98Rcz2Ky/eHtKvBoluMk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfdcefa859859b8dd75f241d26c64eba

Files

dfdcefa859859b8dd75f241d26c64eba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

000000
Size: 1.9MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE