56bba3eab524c73b5344ec9d5be16960N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56bba3eab524c73b5344ec9d5be16960N
Size

3.1MB
MD5

56bba3eab524c73b5344ec9d5be16960
SHA1

5dd31766b433871b33eb7d3094ef7e8c02799cae
SHA256

d8397df6ff47bde3e97dc202d3a92f96c3d7f06554171af8803f8d33b8b02fc6
SHA512

e57741b1f4b84b25b251e8f06445bbcbc2ba2de3ed964e426e03271a058734d0a77fd75c788edea0f3b988c56e3d7428acd88c91c86d3a30a842eb9de0ed3975
SSDEEP

49152:s1dUv9MErOO53RTqtigoJdXN0BMOwLloBrug:sT89NrOO53fJdXN0B7+s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56bba3eab524c73b5344ec9d5be16960N

Files

56bba3eab524c73b5344ec9d5be16960N
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\dbs\el\oc\target\x86\ship\postc2r\x-none\cnfnot32.pdb

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 340B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ