5927ff34247cc44f8109948a52e943b8f7877e766182113da9cc80e32f5df290 | Triage

Sharing

General

Target

5927ff34247cc44f8109948a52e943b8f7877e766182113da9cc80e32f5df290
Size

4.7MB
MD5

d7f9df0fff2167cda92ed63a544e13db
SHA1

ae536c59ae642d9f2cf9a9b5704ceb6dcac9a365
SHA256

5927ff34247cc44f8109948a52e943b8f7877e766182113da9cc80e32f5df290
SHA512

41f4821a15411350062489f5388e6bee315ed51119bad9b906d82eee2337b5cd756ac9cad742d2e05df8bb3198aa49618a063ea99a0d585f656e83624498f55a
SSDEEP

98304:mZQUKNVuBildaX0+23FBtPN3ACRPJtxQkZe1nYNbmgtJHZEd45N6Lx:TUKGBTERVPN3NRPVQkZGnYNad45E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5927ff34247cc44f8109948a52e943b8f7877e766182113da9cc80e32f5df290

Files

5927ff34247cc44f8109948a52e943b8f7877e766182113da9cc80e32f5df290
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ