faca8181c5d291cdf94cccf479ed344601a08262d6013360c0893bcfb73ef84d | Triage

Sharing

General

Target

faca8181c5d291cdf94cccf479ed344601a08262d6013360c0893bcfb73ef84d
Size

4.3MB
MD5

bb4b82d07d2c19fd2bff429685f86661
SHA1

117a32917ee8c5cd0fbe697b1b56969d5bd9c1cb
SHA256

faca8181c5d291cdf94cccf479ed344601a08262d6013360c0893bcfb73ef84d
SHA512

c76d9067b2847e2192db3e75532272ed8b36fec8ed9027dd81873bfba95db3fa14c86703e03529b720e16660e1630fb75e1395d4d7e6e70a3f93a4d7add4b799
SSDEEP

49152:x22mPJ+oSDXVMdNgkK85VnJD7iU7jEmJCuJSpmZO5/jAw1Gjg+AZ7f15:xrm8HDXKg2D7V/JCuJzQxF+AZ7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faca8181c5d291cdf94cccf479ed344601a08262d6013360c0893bcfb73ef84d

Files

faca8181c5d291cdf94cccf479ed344601a08262d6013360c0893bcfb73ef84d
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.data
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 648B - Virtual size: 648B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE