c311a7596559779070f1494c5ad44201f353c0a17d3eae925cfff56c2c669a56 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c311a7596559779070f1494c5ad44201f353c0a17d3eae925cfff56c2c669a56
Size

125KB
MD5

c9cd406bd83d0cfc741134fe9a73dc61
SHA1

57793060989745396b210f9db58ca6983b6a8cf1
SHA256

c311a7596559779070f1494c5ad44201f353c0a17d3eae925cfff56c2c669a56
SHA512

969662380da05b38dcbf1b081d08deef85124b529f74bed9342215e9bf94e9889050bb5715b1610a740f233b580bd38d182d83094e1e0bb15b94bb5202533685
SSDEEP

3072:0td0GYckNQC2z5eIZraqTC0uLaRAJd704lfcjgoZplh7:0tX5lN54lo7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c311a7596559779070f1494c5ad44201f353c0a17d3eae925cfff56c2c669a56

Files

c311a7596559779070f1494c5ad44201f353c0a17d3eae925cfff56c2c669a56
.exe windows:4 windows x86 arch:x86

a7e3e5361e6838308f3f0d9da61498d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gfawin23.ocx

ord5

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ