aa591cfc3088c73635d72df422776d0a4fd81157e940c19eb4a5d381a819530e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa591cfc3088c73635d72df422776d0a4fd81157e940c19eb4a5d381a819530e
Size

3.3MB
MD5

584749d36e13e76b2c91bdbef58859e2
SHA1

cf71915827b62e4ef43e590ba11c3f6424856801
SHA256

aa591cfc3088c73635d72df422776d0a4fd81157e940c19eb4a5d381a819530e
SHA512

90a7278c2b1d5757f6b75d82142cff4aa45a9ddec8194cb64e44e6f9f68a667b09464ba69253d2b7fb244ed1e08a537d1029a080abce7770af837ead8754f0a3
SSDEEP

98304:Lak7c+RYNAKvkTgXuquveY+W2o8oT3ezMrl9cekcHhXh9HJUiWUXsmqsqzl87aWn:h7VmA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa591cfc3088c73635d72df422776d0a4fd81157e940c19eb4a5d381a819530e

Files

aa591cfc3088c73635d72df422776d0a4fd81157e940c19eb4a5d381a819530e
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Office\Target\x86\ship\postc2r\x-none\orgchart.pdb

Sections

.text
Size: 472KB - Virtual size: 472KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 400B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ