1bad0cf08f47dcb49bde0c3d9f689b64341a1e2194ee6c152d1032345454b995 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bad0cf08f47dcb49bde0c3d9f689b64341a1e2194ee6c152d1032345454b995
Size

64KB
MD5

65bc9d2dbcc30fac3c734adaf139bfc0
SHA1

e9454acce7e095c85cc997c83352c06ae6b74054
SHA256

1bad0cf08f47dcb49bde0c3d9f689b64341a1e2194ee6c152d1032345454b995
SHA512

d34d93ab39754931cad171581bf7f4370e2ff2efdcc77386bb8052dadcf7f7cfde77c7dfa0fc487595ef8fa90f9a631bdd3a598cbf6103a57bf87c8a42014afe
SSDEEP

1536:mQL28yHHYUupDvEDZ2fttxazRxkT3RAQm+k5:mQL28mGvEitPhm+k5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bad0cf08f47dcb49bde0c3d9f689b64341a1e2194ee6c152d1032345454b995

Files

1bad0cf08f47dcb49bde0c3d9f689b64341a1e2194ee6c152d1032345454b995
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\tevaji67\gurak.pdb

Sections

.text
Size: 186KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 439KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ