64ab56804b0c9a18d2ac10116bb90e46c66283fc3d7f40892f4246a442047446 | Triage

Sharing

General

Target

64ab56804b0c9a18d2ac10116bb90e46c66283fc3d7f40892f4246a442047446
Size

291KB
MD5

d8666e69e194da9155feeb155ea6dc5e
SHA1

4bd4eaf0955ff45077886b8a1b4d65180227b2ce
SHA256

64ab56804b0c9a18d2ac10116bb90e46c66283fc3d7f40892f4246a442047446
SHA512

497d85a50e0ae8825cbc6475b0f2f9b7a16cb3457f49caa27b3f6137944fbad163c82ad828ca7d43e83855290c8fa77d3aef037ae994b12e9dc850799b3216ba
SSDEEP

6144:0DtUGjG/HBiHKKanTOfZdmFDNS2aOpBZw90:qtDC/H4RXCbwG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64ab56804b0c9a18d2ac10116bb90e46c66283fc3d7f40892f4246a442047446

Files

64ab56804b0c9a18d2ac10116bb90e46c66283fc3d7f40892f4246a442047446
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ