f28f686490d0a11ffa4b33d3935efe9e2373810f6df7092aa309d049315f19bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f28f686490d0a11ffa4b33d3935efe9e2373810f6df7092aa309d049315f19bb
Size

86KB
MD5

1f185d2cb722a199c758ba7c6dab940d
SHA1

f647afbc6946d0ad5e477c8b65a33683eaf219e1
SHA256

f28f686490d0a11ffa4b33d3935efe9e2373810f6df7092aa309d049315f19bb
SHA512

4e1abc543faed061530537e6aff26ec2b2859065cc1ea32c1a427fbd7cf4e9e1cc1f82705e4d3a1e870a15f0e44a04e5b6c6b840bd42399c81820a6a4c857885
SSDEEP

1536:vICQCfd/UV2FyVw4zp6G5XKy1E6w8J52gw0JNqyFzWu9W5uyWZ03:v1t1E2FyVw4zINy1FxJ5y07qluM5A0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f28f686490d0a11ffa4b33d3935efe9e2373810f6df7092aa309d049315f19bb

Files

f28f686490d0a11ffa4b33d3935efe9e2373810f6df7092aa309d049315f19bb
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fcc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wq
Size: 512B - Virtual size: 520B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE