8b9b3da86d99678783216530103330a9249797cb6e57d2628c895e1b84d08419 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b9b3da86d99678783216530103330a9249797cb6e57d2628c895e1b84d08419
Size

592KB
MD5

d805b43f8658ec65aeb8d7d3db706b98
SHA1

dcab503010be4c7c59f73d1be8f25d353da49c4a
SHA256

8b9b3da86d99678783216530103330a9249797cb6e57d2628c895e1b84d08419
SHA512

bcc4b58bf7915cc55a50895c2654db263f5b9ad8b9be04d8918a025383d7e3f1ea5531f3453ca764ffe5449e80a761de34906038573c2cc4c99521c4cb0db718
SSDEEP

12288:vZIG1hJeewhD0o3dDCyn/5siEwhD0o3dD:vZIGZXwhD0o3dDCe/TEwhD0o3dD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b9b3da86d99678783216530103330a9249797cb6e57d2628c895e1b84d08419

Files

8b9b3da86d99678783216530103330a9249797cb6e57d2628c895e1b84d08419
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

KStudioClassic.pdb

Sections

.text
Size: 437KB - Virtual size: 437KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ