afc1636b8c638243e52c259180bede632e747ebaa1f5df1acb036e4df6c9ef42 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afc1636b8c638243e52c259180bede632e747ebaa1f5df1acb036e4df6c9ef42
Size

180KB
MD5

5a497c811c1770aa34ffa92297d3c17d
SHA1

e3765c534ba697d03ef860cb02e4fa326e70cbed
SHA256

afc1636b8c638243e52c259180bede632e747ebaa1f5df1acb036e4df6c9ef42
SHA512

03815e0bfcfbec7904410b229c9dde9dd1c83603add8b9d9f31f4cd15a5d143ff20ae0ef7920041506912876bf2d810405a2b80dd3366c1a2f9efff65bee5249
SSDEEP

1536:nytyxsks0DjdesgHOsXOHepOHeFBq2Bq6:NsksHsuOsV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afc1636b8c638243e52c259180bede632e747ebaa1f5df1acb036e4df6c9ef42

Files

afc1636b8c638243e52c259180bede632e747ebaa1f5df1acb036e4df6c9ef42
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ