980decf2e9e2330f699c4a25f9813679374709039c6b3b634d2604d0622d5fc7N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

980decf2e9e2330f699c4a25f9813679374709039c6b3b634d2604d0622d5fc7N
Size

189KB
MD5

a2eab9b8a22411aeb7fe7b8a04cbd160
SHA1

9aaf7ec5b05d49bae2a7d533d9e6754c851abaa9
SHA256

980decf2e9e2330f699c4a25f9813679374709039c6b3b634d2604d0622d5fc7
SHA512

867e6df53de4f652ecc5a4a1e93a1259f5748c63e9433789089e6786a3ac5696ac0bb4c1b2fdd7a348ad6a92ad4d6a015b60c129cf3628f612dcbe1f7d9db6d4
SSDEEP

3072:438IxLvtLnYPsaNw1kTJrpXUYHjYOAC7CtjvdtRPDNaiYVADaYx+o4xRfvcyh0sf:AXmAihDLavRDYVA+boUHFOTe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
980decf2e9e2330f699c4a25f9813679374709039c6b3b634d2604d0622d5fc7N

Files

980decf2e9e2330f699c4a25f9813679374709039c6b3b634d2604d0622d5fc7N
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mofcomp.pdb

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uro
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE