f0055016[.]exe | Triage

Sharing

General

Target

f0055016.exe
Size

68KB
MD5

85d67512b120007587c153c1144638b7
SHA1

7d573c47a2d4c3474004076ee4cef7a618d5d48c
SHA256

2505b713d7c5ec72aaf4f606255be28cdba1ad4a10e76e0d5bca5b4a44e43141
SHA512

db47fe686c2edb863bd2313a21305050afca2788dfcc0a3e6a19304a87a8e395e297c32ed5cf9ee0004893a6ad42f1e09a2709e0d2270cd99a2ea8f3342d3b46
SSDEEP

768:VI3J11Z7HVur8QJ4i5OJPaE1bMKlLuhRrFu5PHRpfCLV7U5lLLsBnravKiXGZ3:m3lZsBRQKiA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0055016.exe

Files

f0055016.exe
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ