9b051064af69714dd998bba838465b745b93ff09da3579de839a60b42a3c870dN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b051064af69714dd998bba838465b745b93ff09da3579de839a60b42a3c870dN
Size

26KB
MD5

b355031dd1dfe6e96ff4298cc74502c0
SHA1

fe6ec5d5c2b4c7b7d92cc36929bf91c15d6c42c0
SHA256

9b051064af69714dd998bba838465b745b93ff09da3579de839a60b42a3c870d
SHA512

f1ea05435eaba8a20f222393ac58009be929883247a5e487a6b74143a6cacad3cae1dca28d31d9e9314b0805f8a30698d5f6e43fb1632ab974e1d0071a0c26b4
SSDEEP

384:E8g0U0fLMzyKbNzzyKbNWkq3DLXakq3DLXavqPSaYtuSaYtP:pgnKLMWK9WKD2N2LSarSay

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b051064af69714dd998bba838465b745b93ff09da3579de839a60b42a3c870dN

Files

9b051064af69714dd998bba838465b745b93ff09da3579de839a60b42a3c870dN
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ