ff01b0674e0f532ea1dfc1bf5d7fa9918969ea59b99fc662e650e7df1c3f276b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff01b0674e0f532ea1dfc1bf5d7fa9918969ea59b99fc662e650e7df1c3f276b
Size

599KB
MD5

192cea062b9207c9c559bb96bcc1ac51
SHA1

6614c2132edf3c41bebbf40e836d67cc78469724
SHA256

ff01b0674e0f532ea1dfc1bf5d7fa9918969ea59b99fc662e650e7df1c3f276b
SHA512

b973b9050bc34ff2db22ee99e64af1e524c504b94b117d81186f05f863ebf9bda8d2323eebe3461003def8a5892bd027086dc7e970b45fe4472e636fec882252
SSDEEP

12288:026mF+SkB8LO3iwBwSvYoPqwVsSU/iqENY0RxjmWEHiYVWnED3c1DD:LF+Sg8LGiwFvjiwVsSlL9xmJiYoacB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff01b0674e0f532ea1dfc1bf5d7fa9918969ea59b99fc662e650e7df1c3f276b

Files

ff01b0674e0f532ea1dfc1bf5d7fa9918969ea59b99fc662e650e7df1c3f276b
.exe windows:6 windows x86 arch:x86

00a08f762374325d37aa023394e4e94d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Z:\TOOLS\LAUNCHER_TEMPLATE\Populous II\DOSBox Launcher\Release\DOSBox Launcher.pdb

Imports

core/activation

ord100
ord101

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 585KB - Virtual size: 584KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ooa
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ