38de29b7bf0df5c78c7e108b9caed121e4a3fa5411d781463ccd89ee9d3db62d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38de29b7bf0df5c78c7e108b9caed121e4a3fa5411d781463ccd89ee9d3db62d
Size

920KB
MD5

8ef9f5ffc70e4091913dc5b920aa2039
SHA1

26a705008d501ad37311364d9a44c8d3861e9a1b
SHA256

38de29b7bf0df5c78c7e108b9caed121e4a3fa5411d781463ccd89ee9d3db62d
SHA512

690a4e723da5f52b718043070d5f98ce72e6730ae5986f7de1e29947a1de9d85d9e75661f16b2b03f327441b79fc2ee367b4052160847601230ea2fd217b9d59
SSDEEP

3072:S2zDosiEk734Ytkvd04gi0oYhEbOnwBTUawK1tKTsEcC9WaHHD/n6ppaWiFZIPmW:1nyDjn4D3ZvQzn76ppggmhOF0HFZlx6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38de29b7bf0df5c78c7e108b9caed121e4a3fa5411d781463ccd89ee9d3db62d

Files

38de29b7bf0df5c78c7e108b9caed121e4a3fa5411d781463ccd89ee9d3db62d
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

FAXPATCH.pdb

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ