d159cf52dec694043a674c7f473bf70297c6d31e2b5fb9af08bb4fc31abe1c75 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d159cf52dec694043a674c7f473bf70297c6d31e2b5fb9af08bb4fc31abe1c75
Size

81KB
MD5

9653f5ea0745572846452ebdd42c2fbb
SHA1

1b76d1c48364eeb8a096c367edbcaf181696b3ea
SHA256

d159cf52dec694043a674c7f473bf70297c6d31e2b5fb9af08bb4fc31abe1c75
SHA512

71275a44fe2b93de163ca5cfe0fd3d1ea0dc90441a61b9907212e67b55b8c649dcd2ff3916f69b5ddfe79aa4ced51c68d945f3ca045d459fdf0d9658ea896705
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWO4IOO:GhfxHNIreQm+HiFIOO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d159cf52dec694043a674c7f473bf70297c6d31e2b5fb9af08bb4fc31abe1c75

Files

d159cf52dec694043a674c7f473bf70297c6d31e2b5fb9af08bb4fc31abe1c75
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PEC
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE