0x0008000000015e48-10 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0x0008000000015e48-10
Size

16KB
MD5

a7d32f493ab5588b5177b16be278c680
SHA1

923f4dcfd956d6f5b6bb873a499878950abc251c
SHA256

37a378440af5ab0c594286c2ba99254b1e9fc96b55ef822b2c9aad9fae8155ec
SHA512

9f305e8d74b42319e4973ca8d5e325b24a62cfbb722eb80f8d3d57bf0519d02530ec6c685c2a4aa67ed798c6a0faa2fbbff03331f0314ec2759a32c1ceb64a64
SSDEEP

192:naYW58dmhxqak+QOO/kBkdN6GFtlPpLH/OqLI1dYTSFf22RUKuZoHdlflPGMCHNK:28dEqav7OAuPYqsao9ldgOAEGl2dsn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0x0008000000015e48-10

Files

0x0008000000015e48-10
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ