b1f799aee355c1b6c600c8815551c9df9cf3634467de16d5bba403a373f36aba[.]exe | Triage

Sharing

General

Target

b1f799aee355c1b6c600c8815551c9df9cf3634467de16d5bba403a373f36aba.exe
Size

676KB
MD5

6f965db0427447e1d66e7b3aa5cef8d6
SHA1

cf950b9ff3b6889785326d98fc9d76c78c322602
SHA256

b1f799aee355c1b6c600c8815551c9df9cf3634467de16d5bba403a373f36aba
SHA512

c283699ecc767bbf2417f21548c88dff468a37ef17e4291d61bd0c76c64475e24edb77b5c756aa14ac85a260141075c7f0c6fa842f5ce8563fe0e1c50f8b3401
SSDEEP

12288:T4TZEnUEp26NhXyRKldkTgq8j76o0TeaMs6xWmQOXTA/VY/AD:kWY6vyRKrSgq8juTfMs6xWmQOXk/VYm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1f799aee355c1b6c600c8815551c9df9cf3634467de16d5bba403a373f36aba.exe

Files

b1f799aee355c1b6c600c8815551c9df9cf3634467de16d5bba403a373f36aba.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 567KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 23KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 52B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ