1441d10f98d862e75c027d0d847d14dced1ae5fd83226bb60194c10cd3123ed7N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1441d10f98d862e75c027d0d847d14dced1ae5fd83226bb60194c10cd3123ed7N
Size

227KB
MD5

37f1475d5a3b5c329f12db613afc3ba0
SHA1

b802aac3c6a14be0c280550497ba1dd6e2c0b6d2
SHA256

1441d10f98d862e75c027d0d847d14dced1ae5fd83226bb60194c10cd3123ed7
SHA512

20c3965f753968e3b253ff17c222b5019b6402aade9f64d32d4a92999cb6210f0dfe926a24eb190ef0be05dba0f17929987fb8791ad21b966689d897b6167268
SSDEEP

3072:GFQ83gr4yvOtFeaSDpzOoXKvzroHkQsALb0icW7zm8r8P+H/SJftBpGZrpNlVF0T:J8wAFbSdSoX0roEQsAnOc56ttBcXKT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1441d10f98d862e75c027d0d847d14dced1ae5fd83226bb60194c10cd3123ed7N

Files

1441d10f98d862e75c027d0d847d14dced1ae5fd83226bb60194c10cd3123ed7N
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\jenkins\workspace\sapphire_gdi_driver_r2_14\targets\jenkins\workspace\sapphire_gdi_driver_r2_14\installconfig\objfre_wlh_x86\i386\prefix_installconfig.pdb

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.lif
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE