fa81f039d31af0c4675abc0c98e724a714c65ba946917c1bdffca1fa58cc22c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa81f039d31af0c4675abc0c98e724a714c65ba946917c1bdffca1fa58cc22c4
Size

64KB
MD5

f42b3d60d865da4bca3b77c8d0a9e8e6
SHA1

54adce5992905725aba9f6b179584954d3213494
SHA256

fa81f039d31af0c4675abc0c98e724a714c65ba946917c1bdffca1fa58cc22c4
SHA512

3976fdc5207b96e366cf2979d19aeffe0db810c54e9573a7d2c9ec07bf044e1e1a90310c040f8a45e3375c406d7b7b87e77e9aba9f9ae867519ea34a176da888
SSDEEP

1536:QQbgdftSDA7an7c569huNHoUG2C+7nHey7XXOimUIUnKEXYMpKSA:4dMDA7a7c56W/G2C+7n+yjXOfUvEMpKx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa81f039d31af0c4675abc0c98e724a714c65ba946917c1bdffca1fa58cc22c4

Files

fa81f039d31af0c4675abc0c98e724a714c65ba946917c1bdffca1fa58cc22c4
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 62KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

petite
Size: 609B - Virtual size: 609B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ