2024-04-10_17df89403a62dc506c7a0959247778fb_hive | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-10_17df89403a62dc506c7a0959247778fb_hive
Size

4.8MB
MD5

17df89403a62dc506c7a0959247778fb
SHA1

f3fd41e1806fa4f61823f522dc8b359428ecc1fa
SHA256

32c1e2574e5dc4deaf24c9cf66706c4aa9a57a6f4e60622ba9b05366d27536c4
SHA512

a13467d65e63ec4171ed9491270657acbf293099b7987c62ddb1e34abd84da0ef3d4a1bdf19d21b39e9bca2687b1c2c258a4b64296df1fc3215cf92439538aeb
SSDEEP

98304:adJJfdPmsWVL0tTgOSfxglIhWuIia/2AFpDcfx:SdPmsg4TPofx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-10_17df89403a62dc506c7a0959247778fb_hive

Files

2024-04-10_17df89403a62dc506c7a0959247778fb_hive
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 18.5MB - Virtual size: 18.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19.8MB - Virtual size: 19.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 906KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 906KB - Virtual size: 906KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ