df71c78620e946a48f202a5f40ea5ddd17734587afd39ac731f23f255aa1c0db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df71c78620e946a48f202a5f40ea5ddd17734587afd39ac731f23f255aa1c0db
Size

2.8MB
MD5

7b0f76d1a1bf3e217d3d418d819354d3
SHA1

3711f4d7dbfdc0e9dee5d56fa60caace993c53f0
SHA256

df71c78620e946a48f202a5f40ea5ddd17734587afd39ac731f23f255aa1c0db
SHA512

f5cf367ac8e3bb362928c7d43360c1f82b1baaac862309cfbb013c057ef4a85683ea10f476b61584ebb8bc8bf8f183e11d9211a7f1892ca463fb9c1e24555be2
SSDEEP

24576:gCqnstLyUktHIiLyxaewsAjeBsbSAOidYrovp4Tp9aQCoGsXHRaaewsAjpSz:RqnstLet3LysljeBMO+YrovpU/9Nlj+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df71c78620e946a48f202a5f40ea5ddd17734587afd39ac731f23f255aa1c0db

Files

df71c78620e946a48f202a5f40ea5ddd17734587afd39ac731f23f255aa1c0db
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\dbs\el\oc\target\x86\ship\postc2r\x-none\olicenseheartbeat.pdb

Sections

.text
Size: 213KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 354KB - Virtual size: 353KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 320B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ