646637252e1b2109c78327b2194e56849162a92a1244b52bd86b10cb2c59becf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

646637252e1b2109c78327b2194e56849162a92a1244b52bd86b10cb2c59becf
Size

1.0MB
MD5

a087a13a5b8d02e9b3490675bcad35aa
SHA1

1c5130e7fd6f92fc29231189eca1d26bb83aa0c4
SHA256

646637252e1b2109c78327b2194e56849162a92a1244b52bd86b10cb2c59becf
SHA512

21cae982d1225e4be29528f5313be22f19bcfed1fd4e1153001908efb63a1c90949e0b71c3d9942527beeb629b39e39eb0a1b01ec30b7a64bd26bbf81611a6b4
SSDEEP

24576:6u/OfDlEUKWflmTP6Qu/OfDlEUKWflmTP6Qu/OfDlEUKWflmTP:ofU4UWSfU4UWSfU4U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
646637252e1b2109c78327b2194e56849162a92a1244b52bd86b10cb2c59becf

Files

646637252e1b2109c78327b2194e56849162a92a1244b52bd86b10cb2c59becf
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 294KB - Virtual size: 294KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ