420f16ebb2a5dcb72ed1bc307f47b4ffc7960ac61ed264096dc3048a4bbbc00b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

420f16ebb2a5dcb72ed1bc307f47b4ffc7960ac61ed264096dc3048a4bbbc00b
Size

2.7MB
MD5

5cd140bfb7445ce3cf306edd5febda57
SHA1

cdb65d123dd02fc64a96ac354122ceb88848706c
SHA256

420f16ebb2a5dcb72ed1bc307f47b4ffc7960ac61ed264096dc3048a4bbbc00b
SHA512

d08cc8aff03399cd12139e5b23ff7db35cc2cac9d5e4c4e2215f7631982b8c535842bf97d8e9cb1f148e4b9e63a97cecfcead8abd931ad4dfce262fc418fc959
SSDEEP

49152:dkHMiQvv9WGLBy+lIvbu32MyToutyoQ1cFOyCPO:djiQHkmy1y3JyZ6PO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
420f16ebb2a5dcb72ed1bc307f47b4ffc7960ac61ed264096dc3048a4bbbc00b

Files

420f16ebb2a5dcb72ed1bc307f47b4ffc7960ac61ed264096dc3048a4bbbc00b
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

applaunch.pdb

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ