5ab8645eac30fbed41f535295fb7fab508b949402b74d23ce16fc88b1516a0f3 | Triage

Sharing

General

Target

5ab8645eac30fbed41f535295fb7fab508b949402b74d23ce16fc88b1516a0f3
Size

1.6MB
MD5

28e8c4fc511985bf5c4f43175064a80e
SHA1

db31f11dc2a9c3cdda77a76717458d53d82dafca
SHA256

5ab8645eac30fbed41f535295fb7fab508b949402b74d23ce16fc88b1516a0f3
SHA512

5039beea93659d6b4ce86272c095dc606047e5b1972e3df194069e0beb2c5b6a2e9d1afb69fc2410190e2ed05fba84b640872898b550b5ca938d072c3dd28f9c
SSDEEP

49152:aBOYH0ayC5kOLF9nvpmhzzZY8jVTm/5I8:jOVHF9RmNzBjVTm/5I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ab8645eac30fbed41f535295fb7fab508b949402b74d23ce16fc88b1516a0f3

Files

5ab8645eac30fbed41f535295fb7fab508b949402b74d23ce16fc88b1516a0f3
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

MzY0
Size: - Virtual size: 2.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

MzY1
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE