800dfaf164b84c03e01849d5e5d1f061b8df56130305d22ee615a89193555c3a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

800dfaf164b84c03e01849d5e5d1f061b8df56130305d22ee615a89193555c3a
Size

80KB
MD5

40e16d26eacf6d5e9b0b94a4783f6248
SHA1

634c3c459f7e9f769dd4aa949020ed1a95fc4b5f
SHA256

800dfaf164b84c03e01849d5e5d1f061b8df56130305d22ee615a89193555c3a
SHA512

f8a884f4a3a51f1119e2e79d2f44e24a12b200775bf49929ecf12aa69470189b0c45f69794d944b1c422831865aeb88267d771bac1942927fbdf0b39ef271fa6
SSDEEP

1536:wjOPG0PGQJwFJwkpe+eTDPfFpsJOfFpsJCAdCjHKP76VixiOXoUaiXoUav:0OPxPke+e3fFpsJOfFpsJbgEIixib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
800dfaf164b84c03e01849d5e5d1f061b8df56130305d22ee615a89193555c3a

Files

800dfaf164b84c03e01849d5e5d1f061b8df56130305d22ee615a89193555c3a
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ