b97eb4fc410175f8622accf0d468f19fe9018bf7e2ce1d7630b4a1b2a1f3588dN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b97eb4fc410175f8622accf0d468f19fe9018bf7e2ce1d7630b4a1b2a1f3588dN
Size

42KB
MD5

170c9b5404a53a84f09dd2821c82e700
SHA1

48f5e4cadfa390c71e26a277ebe61d154d5b3edf
SHA256

b97eb4fc410175f8622accf0d468f19fe9018bf7e2ce1d7630b4a1b2a1f3588d
SHA512

8c2f4e0657cc81cd7634058c2d50a2341ca97cd79819594fdfe7f24198525b8c9a5741829a8e2bba30b518c638fc30c21e2d2013b5da3b008e0334b2d9f5e85a
SSDEEP

768:w+/iswvXEEhLfyBtPf50FWkFpPDze/qFsqEEhLfyBtPf50FWkFpPDze/qFsYFmQN:wjswv0EhLfyBtPf50FWkFpPDze/qFsxO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b97eb4fc410175f8622accf0d468f19fe9018bf7e2ce1d7630b4a1b2a1f3588dN

Files

b97eb4fc410175f8622accf0d468f19fe9018bf7e2ce1d7630b4a1b2a1f3588dN
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ