41331843125d56c0ad6c572dae80f5de25502f60ebf04d84d7f74c34143cfd2c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41331843125d56c0ad6c572dae80f5de25502f60ebf04d84d7f74c34143cfd2c
Size

1.3MB
MD5

6e4ffec4fc0bd18e94e8bc244c32d3a3
SHA1

4efbc744d42ad26310a959faeddc380d6d35ddc3
SHA256

41331843125d56c0ad6c572dae80f5de25502f60ebf04d84d7f74c34143cfd2c
SHA512

fdee17e2f6063dbdecae324af9451a7b5f6d6e7afe3e7e4d83cce6f59d701dbf3479575e8bea41d6a736b8b5c429e62f64f6f76b188be2b03e8643539d9fe581
SSDEEP

12288:+L1DASh4Ss92XH0YPxOZgJocqzSaGDj0bidyzNJbT7S74Dz:+L1D5mSs96H0YP/oXSaGDQfuSz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41331843125d56c0ad6c572dae80f5de25502f60ebf04d84d7f74c34143cfd2c

Files

41331843125d56c0ad6c572dae80f5de25502f60ebf04d84d7f74c34143cfd2c
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\dbs\el\oc\target\x86\ship\postc2r\x-none\cnfnot32.pdb

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 340B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ