c64a37b350508f708caab89b2faadfc1cddf58f0cde7c459e1d011a8c4fbc8ce | Triage

Sharing

General

Target

c64a37b350508f708caab89b2faadfc1cddf58f0cde7c459e1d011a8c4fbc8ce
Size

12.7MB
MD5

b81e05e1c757e0d14f54d333bb524dd0
SHA1

f9e043a4ae8a58bb833d04401c87adfe6b1df705
SHA256

c64a37b350508f708caab89b2faadfc1cddf58f0cde7c459e1d011a8c4fbc8ce
SHA512

ad5c80dd127a62479d2a393760745001e9779622c6f080c85cfe964e8afd9816985d4d1634fc4afb2c7ea4c59156b1592f21505051e564202cb3a58d383fa280
SSDEEP

393216:p941A99TMonAuhLDK4csJ5BXBsrD8ZVpYI:vfDh/dhJvXUDEp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c64a37b350508f708caab89b2faadfc1cddf58f0cde7c459e1d011a8c4fbc8ce

Files

c64a37b350508f708caab89b2faadfc1cddf58f0cde7c459e1d011a8c4fbc8ce
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 384KB - Virtual size: 864KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 1.6MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 28KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 140KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.winlice
Size: - Virtual size: 22.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 9.6MB - Virtual size: 9.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ