faa9914e943c5160cdf51977270cdb0bac4cd6db4ab8b5ee33471500bb31f0deN | Triage

Sharing

General

Target

faa9914e943c5160cdf51977270cdb0bac4cd6db4ab8b5ee33471500bb31f0deN
Size

96KB
MD5

1af27f1b5bab3fb2dfa7916ef0a7b920
SHA1

e7673fe87b42aa9bd71b6d6b728a827d99633cfb
SHA256

faa9914e943c5160cdf51977270cdb0bac4cd6db4ab8b5ee33471500bb31f0de
SHA512

337b0199dfacb05cf34a42df1b187b6e3971d74ba8d96b7c972039b349ff9be86ae7adab5ae39ed4ca60ae659e3aea5906e9f7296d21e34cd202304a2d9cb5b0
SSDEEP

1536:yrkHqulbvyVfXDH1TBtZS4bqaoTA/Uc+zs2hgnUHErODRiQghDtK6hrUQVoMdUT/:ybulbatTpZ2dgUc+zlhgn/rOtiPG6hry

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faa9914e943c5160cdf51977270cdb0bac4cd6db4ab8b5ee33471500bb31f0deN

Files

faa9914e943c5160cdf51977270cdb0bac4cd6db4ab8b5ee33471500bb31f0deN
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ