f9cba1619693d11de395d28f69db119221d985467189858e6640f617218cd377N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9cba1619693d11de395d28f69db119221d985467189858e6640f617218cd377N
Size

1.2MB
MD5

399dcb7d66d0360f779926bcae893280
SHA1

e1051cca9e6fd790ea86d4d1497133229564eff6
SHA256

f9cba1619693d11de395d28f69db119221d985467189858e6640f617218cd377
SHA512

4c8f58fb33a3b3650aab0802fdb45a6c4c433405b29c8fb1427924da58da97031a6a4fd1faed0ee2b7ba7b8f89d35ffe0ed35201b169574660c5f1b33bec547c
SSDEEP

24576:goyyWoK1NGqzuhaXjoClG4puRP3vssEv3:gHNGRa3lG4puRPf1g3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9cba1619693d11de395d28f69db119221d985467189858e6640f617218cd377N

Files

f9cba1619693d11de395d28f69db119221d985467189858e6640f617218cd377N
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 731KB - Virtual size: 731KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 218KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.htext
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE