71e962274c58ca8feda44334fc1a22dc42e7acc9c638bd4d15608a1a838a627c | Triage

Sharing

General

Target

71e962274c58ca8feda44334fc1a22dc42e7acc9c638bd4d15608a1a838a627c
Size

2.6MB
MD5

b5c6ccfb197b8467ad678281df44e8bc
SHA1

da40e9a1d28b223a181c86d1977f1785043ae0e9
SHA256

71e962274c58ca8feda44334fc1a22dc42e7acc9c638bd4d15608a1a838a627c
SHA512

7e3e01fa95b451199735fe130e8af89a9303a6192c35d493f0078d751794d70038f9798e3c7d659db4401ac8047842ff275f76d85b71c06b0f57c67153a8335a
SSDEEP

24576:XWMeAeqR26S69Jn4AqshWLVfr19uQy46wLd4BWBVAlFdAa+bnRlTq1wJuhYfTlsH:GMeAv06S6Ascpr2ORyh6hd9bU7N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71e962274c58ca8feda44334fc1a22dc42e7acc9c638bd4d15608a1a838a627c

Files

71e962274c58ca8feda44334fc1a22dc42e7acc9c638bd4d15608a1a838a627c
.exe windows:4 windows x86 arch:x86

2eabe9054cad5152567f0699947a2c5b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrcpy

Sections

Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xzifghis
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jqrynsft
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.taggant
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE