a55ce42b53640ec0cc02cd165de3d145b71b209c2a47a9cfe3a8bf19bb3d77b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a55ce42b53640ec0cc02cd165de3d145b71b209c2a47a9cfe3a8bf19bb3d77b6
Size

2.4MB
MD5

838fec3424182616a427e26b7de97ab7
SHA1

2d89ec7e349bfa516699e3d494e835a94d1392b1
SHA256

a55ce42b53640ec0cc02cd165de3d145b71b209c2a47a9cfe3a8bf19bb3d77b6
SHA512

328555a5abfd7995a2aa119802abb15589d9f5e4410909fdc3a434faea4dbc812a5362e78ce3dec828f2709dbb6b290acbe761b0520679a7635424a7bac54c00
SSDEEP

49152:rgg+c8MNFdv9MLljeE2Mf2mDta4R/4MnYYJ2ZhqSGLHkJEMy:rgg+c39frCeIDQy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a55ce42b53640ec0cc02cd165de3d145b71b209c2a47a9cfe3a8bf19bb3d77b6

Files

a55ce42b53640ec0cc02cd165de3d145b71b209c2a47a9cfe3a8bf19bb3d77b6
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

FAXPATCH.pdb

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ