fafbf854ea064bcc782b6f1ab209c9da016f378ce4b59bf2f992a7c485f40314 | Triage

Sharing

General

Target

fafbf854ea064bcc782b6f1ab209c9da016f378ce4b59bf2f992a7c485f40314
Size

341KB
MD5

5baa25c83c13a428236d4b69945dffb4
SHA1

e1d52b8302ccaa8c86c1cb62bd254bb2cdbb949a
SHA256

fafbf854ea064bcc782b6f1ab209c9da016f378ce4b59bf2f992a7c485f40314
SHA512

3f940be33e88e4b07cddd913aeb5a753ea77337f8d799de439d4fee7637371c4700ac8920091fcd2afd95f74ca5ec384e99354920c466a8f8ff7891287d73038
SSDEEP

6144:/HFTZoCSnuW/Gx4hh0jrzQWvzotyTi49IfvYZd3bM7gKRD9D/l7X7LuIn9uOXbM:f3fSuWOx4hitoY2Udra1hN/Luw9uOXb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fafbf854ea064bcc782b6f1ab209c9da016f378ce4b59bf2f992a7c485f40314

Files

fafbf854ea064bcc782b6f1ab209c9da016f378ce4b59bf2f992a7c485f40314
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 338KB - Virtual size: 338KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ