ff002d41dee7b1359e7f5a6813845100N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff002d41dee7b1359e7f5a6813845100N.exe
Size

320KB
MD5

ff002d41dee7b1359e7f5a6813845100
SHA1

d39bc0ceb5612397b5e5aa73b2e40e18dcbfdaa2
SHA256

171d71a177a5155e6930ad186e01c194a3579c2436c0bca64f5eb52aaaad2e9c
SHA512

8abd516a132379450f3285421af5020619121aca6182adcef188fba11b7bc53ac79e65d5bdd0caff251e34e651e110f7ad05b6d385eaf4acad77d9357e57a502
SSDEEP

6144:ezo0WeupoeLAYCtE07kli0KoCYtw2B0Ddu9szWfx09UBIUbPLwH/lLOUaR/N1I0Y:exja0YJ07kE0KoFtw2gu9RxrBIUbPLwz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff002d41dee7b1359e7f5a6813845100N.exe

Files

ff002d41dee7b1359e7f5a6813845100N.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ajelhf
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ