fec30bf5ea53edd53988ce0f0c234224721cf9200da4af2985744595d6a131af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fec30bf5ea53edd53988ce0f0c234224721cf9200da4af2985744595d6a131af
Size

5.2MB
MD5

6c80fce146e38c8a8a64fe9c57b9077f
SHA1

660f88c36cb8d3570127c7559fc2bdb79c089eb5
SHA256

fec30bf5ea53edd53988ce0f0c234224721cf9200da4af2985744595d6a131af
SHA512

d65ce07c71b09b9d43b6f9fa14809c8c32fc89ebd45f3a721a7b635862c9c091d99c068c18d9ebda9aa25967b2cc29d719f0c45a2f12171b69e9461a919485bf
SSDEEP

98304:hOIDqDHwRHU+Vy/CexDnOx0kgtrj30/sUN+dnmuD7XuIxvVF++1Wz9vPzYLQXYj8:rDqDHsHnk/C6DOx0jrjosZXDrf1++yPh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fec30bf5ea53edd53988ce0f0c234224721cf9200da4af2985744595d6a131af

Files

fec30bf5ea53edd53988ce0f0c234224721cf9200da4af2985744595d6a131af
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 26KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.winlice
Size: - Virtual size: 12.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 9.4MB - Virtual size: 9.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ