5a4c423978203d86b91bddf0231c5ec558c61fcc9346b7a3452b45fefedc384c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a4c423978203d86b91bddf0231c5ec558c61fcc9346b7a3452b45fefedc384c
Size

13.5MB
MD5

5585aff5e6d700da680c965fea06fcb3
SHA1

eef36b7f73ad9b3f27c342a815972f9b85d2cba0
SHA256

5a4c423978203d86b91bddf0231c5ec558c61fcc9346b7a3452b45fefedc384c
SHA512

2cdf7639a36644f54ef0fe56195faf136c399069d68eee8bcd63a527361712d4560bbfc8013124c8569ea0dee4b086c7d645001267a93c17eecbaca10f09bc4c
SSDEEP

393216:+AW4NptCWKQcLZjRX8xrYs5fS8FL9igllf98OPU:+F4N2LZFXE5f/9i6z8OPU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a4c423978203d86b91bddf0231c5ec558c61fcc9346b7a3452b45fefedc384c

Files

5a4c423978203d86b91bddf0231c5ec558c61fcc9346b7a3452b45fefedc384c
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 803KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

shared
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.TH5
Size: - Virtual size: 8.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bb>
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nJ<
Size: 14.4MB - Virtual size: 14.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ