dcb8841a3bbfb5821a6f027c64c85d3dace55ecf8d44be39b29453896968ba45 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dcb8841a3bbfb5821a6f027c64c85d3dace55ecf8d44be39b29453896968ba45
Size

999KB
MD5

2baf7947bf58cb0486dc9cecf17ec4b6
SHA1

f22706793f3530390ba9d7746d9b925cb0b07bae
SHA256

dcb8841a3bbfb5821a6f027c64c85d3dace55ecf8d44be39b29453896968ba45
SHA512

bddfe42152c55e3adb99a3ced6a823a226177e3a021c0ba6b7b783015cfab85699a65273962e9adb6ad51d9d32760f7a72407a73e020630195249c5738f0353f
SSDEEP

24576:Yvhj0c3arl60R3c5ZSwYrIXdkomjaZoOt3/M2/Cg:YvZ/3U60R3GAwgIXdko5ZoOt3tCg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcb8841a3bbfb5821a6f027c64c85d3dace55ecf8d44be39b29453896968ba45

Files

dcb8841a3bbfb5821a6f027c64c85d3dace55ecf8d44be39b29453896968ba45
.exe windows:4 windows x86 arch:x86

6f867ea0a04f192878c77fdd26f30e74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlResetRtlTranslations

kernel32

GetUserDefaultLangID

user32

GetProcessWindowStation

Sections

.text
Size: 992KB - Virtual size: 992KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE