00545f7669af68979c680b4bb976190b34c94bb1753f2a4320c1b472d1067104 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00545f7669af68979c680b4bb976190b34c94bb1753f2a4320c1b472d1067104
Size

1.2MB
MD5

4c8ffbd3edc8b0a0fa7df5090506fb58
SHA1

da5f5a74cde1061e6919d93d19ece16ba89dfa19
SHA256

00545f7669af68979c680b4bb976190b34c94bb1753f2a4320c1b472d1067104
SHA512

0cb2bdb00254b5b2cd00c695e0f0e7b617a6070f144367b09aa7eebe8e17f9092fd7a877fb0aef88c4240e6a269d90c008a0ff3bde770e5296b90f09458e35b8
SSDEEP

24576:KL3xIHgzraryB7d9u6ARvwvaKYrshIuoJ785SFFiPTqjJLFvVGPyUm7:cqGrKyBK/lTVrsheB85SFeTqNpvVGPyv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00545f7669af68979c680b4bb976190b34c94bb1753f2a4320c1b472d1067104

Files

00545f7669af68979c680b4bb976190b34c94bb1753f2a4320c1b472d1067104
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 600KB - Virtual size: 599KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ