fac5972af54f19b5e5de77866a3adf1f244df7c2a5b28afed0a630abd71d7a94 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fac5972af54f19b5e5de77866a3adf1f244df7c2a5b28afed0a630abd71d7a94
Size

183KB
MD5

89a167b3666ec813c8a1f8906791f673
SHA1

445b96e3601978e8547beea9d42cac9daed2e8fd
SHA256

fac5972af54f19b5e5de77866a3adf1f244df7c2a5b28afed0a630abd71d7a94
SHA512

8fa4aef9438bca9c17707809826a91c97ab74fb8b62bce9c4438a0ed012756fe2c0b591a790127d71af74b7bf704ae16a1e0b3f981e624926418b7587ab43190
SSDEEP

3072:sftffjmNAwLEVbLoEZlKk7611VBzNkDqrB5bGEAd9/E3e7IFxt:0VfjmNARuk7611VBzhEEu83n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fac5972af54f19b5e5de77866a3adf1f244df7c2a5b28afed0a630abd71d7a94

Files

fac5972af54f19b5e5de77866a3adf1f244df7c2a5b28afed0a630abd71d7a94
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.Upack
Size: - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE