878d5b369a5f12261c4ca0f1d41ec8491dfe24ed6d9ad3cf58ce3eca3e159708 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

878d5b369a5f12261c4ca0f1d41ec8491dfe24ed6d9ad3cf58ce3eca3e159708
Size

346KB
MD5

942a9a6fe09de8c4a7679285cb6fda5b
SHA1

f904ca791141213026f12856b75067cac7b8eb48
SHA256

878d5b369a5f12261c4ca0f1d41ec8491dfe24ed6d9ad3cf58ce3eca3e159708
SHA512

8837b65f3eed37f930847e487448748ffba452ab0da3db7d2fb2a7c77a355994388636304db7f548d916c90471e6616d3fe6a672304da774f2ac149c112f9c1c
SSDEEP

6144:ZMa9ZBnrmUb5MyU/4dntvbaX2fCXapqs07W37D34mx2yefaV2Tg7S:ZMa9ZBnrm9yU/WnhbRKXqqs0S35x2Rye

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
878d5b369a5f12261c4ca0f1d41ec8491dfe24ed6d9ad3cf58ce3eca3e159708

Files

878d5b369a5f12261c4ca0f1d41ec8491dfe24ed6d9ad3cf58ce3eca3e159708
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ