ada945fcf4f2675d72ce5fcb878afb10841c438931427b31e28db51881382adb | Triage

Sharing

General

Target

ada945fcf4f2675d72ce5fcb878afb10841c438931427b31e28db51881382adb
Size

339KB
MD5

12ae15bac3fa56889eb05b963cc6ce28
SHA1

c8bba151412a11eada2cd38940a487da647c1447
SHA256

ada945fcf4f2675d72ce5fcb878afb10841c438931427b31e28db51881382adb
SHA512

cab90667b2a4a1fd19cc1693d2f4d8dfa4fdbda2c9a742ba127225e8e82a831d86dd6de7eba212d63ea22c745f8c291fc2ce137f4e4f791cf08efd6f3608a454
SSDEEP

6144:2S2lfkZS8UaZGi50qgA3KOpDPXmzC2mp7o5:41sSDqgA3KOp0C2US

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ada945fcf4f2675d72ce5fcb878afb10841c438931427b31e28db51881382adb

Files

ada945fcf4f2675d72ce5fcb878afb10841c438931427b31e28db51881382adb
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.voltbl
Size: 512B - Virtual size: 46B

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

./9=
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 411B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

jlhyl
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE