5fa6c81833218c2e1eb4dccbc33366e332d0e5c291411247ae9e00328f2560f4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fa6c81833218c2e1eb4dccbc33366e332d0e5c291411247ae9e00328f2560f4
Size

4.5MB
MD5

f3d03aeab87e7bb1b1355063fc6d4f2e
SHA1

69bc0d2b6728f09954495fb3e80434ffd631c9cd
SHA256

5fa6c81833218c2e1eb4dccbc33366e332d0e5c291411247ae9e00328f2560f4
SHA512

9c7e5405f97768b8996521526e19e503d742cf9b03599f85b7d5032c9313bc1d568c367fcd77b0046e5affd366e8ed6b260bb39e4cd25c66496557b76d65b7c1
SSDEEP

98304:NqVG0MODUhDxpjP9VS2hcOswV1OMA2ac2Txn5hxALVS6C6EPwD+:ERMOQhL79VSkcMFtrqxnzh6ChPwD+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fa6c81833218c2e1eb4dccbc33366e332d0e5c291411247ae9e00328f2560f4

Files

5fa6c81833218c2e1eb4dccbc33366e332d0e5c291411247ae9e00328f2560f4
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 917KB - Virtual size: 917KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 636KB - Virtual size: 635KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ