546507b4b20f1df7a6700e81f0fa3bd1f0a622d50b7b8fb991352dd5fba932bc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

546507b4b20f1df7a6700e81f0fa3bd1f0a622d50b7b8fb991352dd5fba932bc
Size

962KB
MD5

50a663057a9b465afc3147491362a0d8
SHA1

aaf9cb0e161b3f704236b3257211eb46f815ada0
SHA256

546507b4b20f1df7a6700e81f0fa3bd1f0a622d50b7b8fb991352dd5fba932bc
SHA512

51771f5fdc621aec1e8ec53a073bbb73f3504b0e3b39322740948f223f13b958bbe4a45dbe295c914a5361466bdd480543a9bfb88adfd3adbc80ff2ab69800a1
SSDEEP

12288:lWv/2vr5rPzXGpmkUZzZg8EMbX9CiMYbnBaSsPK:lWvqX3g5A9CTYbnASo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
546507b4b20f1df7a6700e81f0fa3bd1f0a622d50b7b8fb991352dd5fba932bc

Files

546507b4b20f1df7a6700e81f0fa3bd1f0a622d50b7b8fb991352dd5fba932bc
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo

Sections

CODE
Size: 367KB - Virtual size: 368KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 34KB - Virtual size: 468KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.INIT
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ