fb73a481b553f79d9fb826a5d973bc84e3905e8cb7da0d34aea8f6c55ac8d381 | Triage

Sharing

General

Target

fb73a481b553f79d9fb826a5d973bc84e3905e8cb7da0d34aea8f6c55ac8d381
Size

4.6MB
MD5

e9cd92888955ec6ca951d1ecd9547247
SHA1

4f7e56c3bcadbe17bd81b8fbd47a0dbe53d03308
SHA256

fb73a481b553f79d9fb826a5d973bc84e3905e8cb7da0d34aea8f6c55ac8d381
SHA512

4d04c1b527021a63503f46585e5358c39a9f8e81453c2586b6399712e5c09d01c93a7dc42f65cb669587d4730c30b4bc247cc760101f03aae6bc35c5d229773b
SSDEEP

98304:48mgP/v+pYZF1O+oBWKLt0PG3ehUEtuf5UMv3+GcFKojWvix:28CEjOCpzgf563Zv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
fb73a481b553f79d9fb826a5d973bc84e3905e8cb7da0d34aea8f6c55ac8d381

Files

fb73a481b553f79d9fb826a5d973bc84e3905e8cb7da0d34aea8f6c55ac8d381
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ