9b1b3dac1240985e840e175cfd3bba0672e889536b137c138fc7e1e3918853a1 | Triage

Sharing

General

Target

9b1b3dac1240985e840e175cfd3bba0672e889536b137c138fc7e1e3918853a1
Size

640KB
MD5

e1bf9bff0a8f59b1300e32af500f0a2b
SHA1

7f69894c8feda53b8613340b7884101ec50ed964
SHA256

9b1b3dac1240985e840e175cfd3bba0672e889536b137c138fc7e1e3918853a1
SHA512

73f1143fd91e8b66aa4d74ef32e159ebabf0bfa3a25461e5956e7e7c77fd00b778b683a5e67b2e8cf817a8526dd247968c9569e55a0304ea5f8b28f085d5280e
SSDEEP

12288:HWBm+95nHfF2mgewFx5A77SQJwuiCi1kfgjdkAnUKkD57lc0fzEV/d9RIY/9k128:HWBz95ndbgfx5A7QygjTnUKkD57lc0fp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b1b3dac1240985e840e175cfd3bba0672e889536b137c138fc7e1e3918853a1

Files

9b1b3dac1240985e840e175cfd3bba0672e889536b137c138fc7e1e3918853a1
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 182KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.l1
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ