bff2383d479c5496b054f597af68240b7837797b1e21d6a172a0206cc4d3e560N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bff2383d479c5496b054f597af68240b7837797b1e21d6a172a0206cc4d3e560N
Size

4.8MB
MD5

00dcee59af7a92fdd28b4c8bb3e77820
SHA1

ea63a30b4edc2ce3f40baa4593caad2b1915f64d
SHA256

bff2383d479c5496b054f597af68240b7837797b1e21d6a172a0206cc4d3e560
SHA512

29fa0bed0709a4a4841e3a62dc262955cff5904b071afd490043644238e823eb79e84bacca5c5ffeaffef2b95cbd83d12ea9acf3a20c9bb04cc1dee192a4ecad
SSDEEP

98304:hdbC3wwyoSIDWqJuSEUjLc1U0YfIsjHIMZI+glScbOH4+Gg602X1OTQjTvCXWSKI:hdbC3wwyoSIDWqJuSEUjLc1U0YpfgiHX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bff2383d479c5496b054f597af68240b7837797b1e21d6a172a0206cc4d3e560N

Files

bff2383d479c5496b054f597af68240b7837797b1e21d6a172a0206cc4d3e560N
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1018KB - Virtual size: 1017KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14.8MB - Virtual size: 14.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ