a01a58c8df0e32233262a41a7dec1af1c02809f623d0d65e6e0754086fa5d6f9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a01a58c8df0e32233262a41a7dec1af1c02809f623d0d65e6e0754086fa5d6f9
Size

1.2MB
MD5

21ed7809a57b7353d6bf73483dd0bec6
SHA1

311fc7d78d6a9cf75145a01afaa2b71de3d7cae8
SHA256

a01a58c8df0e32233262a41a7dec1af1c02809f623d0d65e6e0754086fa5d6f9
SHA512

ff1a43499c0a0cfd2f05f4d3ebe7580abebf65ba8c6194fcae20dae4901961183b730c7ec7c0b3441c9aca6ced8a2ddc32d3833294fa1358c1dc943e20d00739
SSDEEP

6144:PEcAMGuDpl+l+lBltl6l+l+lYxWApGO+5tbXWBZw6ZraL3mNhc1zudfVh9M9soUM:VAuDzxWCotOw6BakctWdh9MZz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a01a58c8df0e32233262a41a7dec1af1c02809f623d0d65e6e0754086fa5d6f9

Files

a01a58c8df0e32233262a41a7dec1af1c02809f623d0d65e6e0754086fa5d6f9
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Office\Target\x86\ship\postc2r\x-none\msosqm.pdb

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 220B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ