00f1c3c6ae2e20a01397bcbb3592ff0ae217a77eb69d6f4dc94952088735d31b | Triage

Sharing

General

Target

00f1c3c6ae2e20a01397bcbb3592ff0ae217a77eb69d6f4dc94952088735d31b
Size

197KB
MD5

79f73115af9f361742e5818dd39fd84c
SHA1

423986739d5a7d84309d6cf286a55fd0dddc692e
SHA256

00f1c3c6ae2e20a01397bcbb3592ff0ae217a77eb69d6f4dc94952088735d31b
SHA512

f1eebc1eed7b3244b75144865a902ca68e620804ccfadcff85a526812b5e538d375ad57fa3783000d9b555d49cf6ba1b5892fd855b7bee41c4be906cd462aa37
SSDEEP

768:arD/CByJIhUMFzpFTZiggkC1Daunk8+XMcHHHNcHHHVMjuq8IZu3YeatCz8GbqUD:wD69hT7lKlDau5IIM0YeaYuUs/25oq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00f1c3c6ae2e20a01397bcbb3592ff0ae217a77eb69d6f4dc94952088735d31b

Files

00f1c3c6ae2e20a01397bcbb3592ff0ae217a77eb69d6f4dc94952088735d31b
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

icwconn1.pdb

Sections

.text
Size: 60KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA