144fc8172a3dabc88af319fc314c4db96ff9080704c624e5f9d710b8ae5d8033 | Triage

Sharing

General

Target

144fc8172a3dabc88af319fc314c4db96ff9080704c624e5f9d710b8ae5d8033
Size

1.7MB
MD5

c9a02a9452c2bd772d5e82ba0bf90812
SHA1

503c9b8ef166f1f3e27b2f966c1f370aae238e17
SHA256

144fc8172a3dabc88af319fc314c4db96ff9080704c624e5f9d710b8ae5d8033
SHA512

574e637fa4157f8959615683fd07fe03ea58c2570dc732c126453d6c06f56f7072b2b12f7841081c850d6d7d35a5633bd37f29fe5c28e85f32f92939fec5aa5f
SSDEEP

12288:pLEuza2waF1JZlT/sBywHQy5fJ1GLk2mCiu5Fx/DxV7rD0KImt0LDTdB3I7:pLtF1flT/gHQy5Sk2txzfadB3I7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
144fc8172a3dabc88af319fc314c4db96ff9080704c624e5f9d710b8ae5d8033

Files

144fc8172a3dabc88af319fc314c4db96ff9080704c624e5f9d710b8ae5d8033
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

FileSyncConfig.pdb

Sections

.text
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ