1bab88da50e05a6535ff1bb8d587e12b8f612be0d3698b0da950eeefddb06edd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bab88da50e05a6535ff1bb8d587e12b8f612be0d3698b0da950eeefddb06edd
Size

76KB
MD5

89aeca23c8882f42fc2ff158af508051
SHA1

b3c6c98e842f1ac047cb1c85c7ba72e91da33b20
SHA256

1bab88da50e05a6535ff1bb8d587e12b8f612be0d3698b0da950eeefddb06edd
SHA512

812d3d38f723a7150891330075e1c966cd565ccac77cd7b8163a40c39ef291bb6ccbd44c04b9ab4a7a3343b5440361aa44bc73affaf4fe56ddc8718d7dacfe33
SSDEEP

384:XIVx8+mnTRDQrr2KaJlBNWAC4GbV8AdFr0qeJNwPl/:XIVxoVkrrB4LgAhGZ8AdKX+/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bab88da50e05a6535ff1bb8d587e12b8f612be0d3698b0da950eeefddb06edd

Files

1bab88da50e05a6535ff1bb8d587e12b8f612be0d3698b0da950eeefddb06edd
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE