5e1e77b8a2a341fc84b3158f54dcf8d4e9a3c98ed80a1a536097b491600902aeN | Triage

Sharing

General

Target

5e1e77b8a2a341fc84b3158f54dcf8d4e9a3c98ed80a1a536097b491600902aeN
Size

2.3MB
MD5

4e026fca1fb8b264c5e299da1eb6d980
SHA1

0ed6dd2e3cfddf7a591c99a5e4e32887a0a6849d
SHA256

5e1e77b8a2a341fc84b3158f54dcf8d4e9a3c98ed80a1a536097b491600902ae
SHA512

565a463df71b3fb2ccb298ad7fdcf9d1df18eebc265201e2d0c66e75c9c939659fb5156ad9c80dd83222bb1cc4b553f5e1b149ce0efecbfcb1ff0da26e94da6f
SSDEEP

49152:ClLXbtL2tLfusNDS5lSGv9M1+V8tgJd88h:ClXV2VfjNDS5lSW9o+Cga8h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e1e77b8a2a341fc84b3158f54dcf8d4e9a3c98ed80a1a536097b491600902aeN

Files

5e1e77b8a2a341fc84b3158f54dcf8d4e9a3c98ed80a1a536097b491600902aeN
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

FAXPATCH.pdb

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ