1b2f4668b2698aed2d77223811eff9331d9c143236b7e9199b0dadee4a3bec05 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b2f4668b2698aed2d77223811eff9331d9c143236b7e9199b0dadee4a3bec05
Size

151KB
MD5

954910db05edf13aab4c1df5ddeb1933
SHA1

affe41201ffebdb63f2a5c9d48025a47e8eca6be
SHA256

1b2f4668b2698aed2d77223811eff9331d9c143236b7e9199b0dadee4a3bec05
SHA512

425f4c6f81fb46c2b75c3e375c38ce17d8e1cc8b2563b1ce264ff0d0b833c298503440ef316e930f9c91757ba7757bc55caa30e2fedf80dadb22e448782c47f8
SSDEEP

3072:AwkgRDZ5XUwfgkC4SpAuCsbZbrbr9ze7+1PYL4hBttH:AkLX3fgZXVK7iRH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b2f4668b2698aed2d77223811eff9331d9c143236b7e9199b0dadee4a3bec05

Files

1b2f4668b2698aed2d77223811eff9331d9c143236b7e9199b0dadee4a3bec05
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\work\otronombre2.pdb

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 656KB - Virtual size: 655KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ