a1b8d6a5ff91ca2115f20cc081e1b668777dce9bed53651f9652fa2642d9cd17 | Triage

Sharing

General

Target

a1b8d6a5ff91ca2115f20cc081e1b668777dce9bed53651f9652fa2642d9cd17
Size

44KB
MD5

207381e47a5cebda150fdae6ffa59d3f
SHA1

3c8a99a4fd6f3aa0f29013d97a6135ccb6232252
SHA256

a1b8d6a5ff91ca2115f20cc081e1b668777dce9bed53651f9652fa2642d9cd17
SHA512

723de33f0d8cb4936f60d6798a02c746edaad06ee0dcfc421e80fface17e59d4b11575f91d05c0ca71b660742b59cee2d98dab740dfd8f88c687d91e634c1bbb
SSDEEP

384:PbZgNhXiYRwcvsij14udndv7RV1ues2gXk3lkB+SCHGm3ZwWgZWe:TZ/KwcvsijOqvz1uesvikB3HN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1b8d6a5ff91ca2115f20cc081e1b668777dce9bed53651f9652fa2642d9cd17

Files

a1b8d6a5ff91ca2115f20cc081e1b668777dce9bed53651f9652fa2642d9cd17
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wab.pdb

Sections

.text
Size: 16KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA