56eafb42ca8e49dbdc853bf563bc39ca3e4ec014335162f7a69dc9188c5190e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56eafb42ca8e49dbdc853bf563bc39ca3e4ec014335162f7a69dc9188c5190e3
Size

2.0MB
MD5

9f34bfa347c96c3b9e52ad129710fcbc
SHA1

736257eb497c4f0c778820d670662ac39743295d
SHA256

56eafb42ca8e49dbdc853bf563bc39ca3e4ec014335162f7a69dc9188c5190e3
SHA512

973e627ea9a6de6b8ccf16e3e7d0f7573371f36de0a2cc48d8272f4b16190c5d6a2b1235eb608912d769903a22cd8b3fff63a3b995e4a82843d74cbabb2073af
SSDEEP

49152:32Xmb3GkMrvbsS+p8k+6muPHwMMLsrza+/Afz+iDkyehnqEoZ:m2zbMJy8J6zHH3amwNkPqEoZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56eafb42ca8e49dbdc853bf563bc39ca3e4ec014335162f7a69dc9188c5190e3

Files

56eafb42ca8e49dbdc853bf563bc39ca3e4ec014335162f7a69dc9188c5190e3
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ