2daf31dffd7f68eb14731594e6dcb92e64b5cfa8189221acf9e6f61325bc8538 | Triage

Sharing

General

Target

2daf31dffd7f68eb14731594e6dcb92e64b5cfa8189221acf9e6f61325bc8538
Size

5.1MB
MD5

d723d01cea23e5a0563b070994cc60d3
SHA1

a77949da7dd4dee67ffe0b1b76a12611c1038cca
SHA256

2daf31dffd7f68eb14731594e6dcb92e64b5cfa8189221acf9e6f61325bc8538
SHA512

eccd89218b2b9357538b9ffa08d5f7e24eb9b37403136214aa57a94f913b66d7ffa0b18efc881b305cbb15ae01d272847ca95d87bc0036eaf846de43cd43b284
SSDEEP

98304:mXtH5Z1dB8AX0Qid1PNi0f/2dNC2jiD46GKb5/oDk/psn3HMjd6gEOP4CJXOD1TC:6Z5Ld/byPNHWC2846DoDk/M36FESKNvK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2daf31dffd7f68eb14731594e6dcb92e64b5cfa8189221acf9e6f61325bc8538

Files

2daf31dffd7f68eb14731594e6dcb92e64b5cfa8189221acf9e6f61325bc8538
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ