Authenticator_latest[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Authenticator_latest.exe
Size

886KB
MD5

9379fa82d9ae4bd4ea89e3baf41a6b0e
SHA1

59c0226e5cf4d1e8b7c67e393de06e0aed50f54e
SHA256

0ff2cd847e3f7027d157e6664219b2f2644d64db4d982ddedaffc710a7c7e07c
SHA512

acb4587c212ecdf3311e1a0ba9a8e3273b89c2362aa7ada5fe576680188cfd081e893497bb49288007fe0a0ea886c4fc3c73f1bf99fa496a152d2e9bcea53f8c
SSDEEP

6144:qeZVCFYGYbi15W9zTk1Ce4mSwYVJB3BizuEN73XSraz8GaK3g2wspsDhxlmJ:TVUYzbo5UzsLEDdBinWaz5nwgCDh/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Authenticator_latest.exe

Files

Authenticator_latest.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 322KB - Virtual size: 322KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 525KB - Virtual size: 7.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ