bb5642438f0536e33c4676cfd7de8f665c012e20ae7cf3a71cc507be82b8407e | Triage

Sharing

General

Target

bb5642438f0536e33c4676cfd7de8f665c012e20ae7cf3a71cc507be82b8407e
Size

2.9MB
MD5

225c727ba82ab261e74c46066c69f5f2
SHA1

362f9e2e40eb714088ae50f6f6457d1cdf2bbea4
SHA256

bb5642438f0536e33c4676cfd7de8f665c012e20ae7cf3a71cc507be82b8407e
SHA512

da2a4352e294d1d6ff8fc67b890c5e1b6fdac3641435435082c4485584c6655fe9838b9a2d493e22cce06748304dcf3801bc5112ac87fbb1205a8ef93f55a06e
SSDEEP

49152:Ui39+084E6W4W8Vm/hN49aXZmMAymjqxkvRMFchgIPyGZh87gxGYw1yHOHH:j+HVb4W8QL49un2IP0ghG7KYwMHEH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb5642438f0536e33c4676cfd7de8f665c012e20ae7cf3a71cc507be82b8407e

Files

bb5642438f0536e33c4676cfd7de8f665c012e20ae7cf3a71cc507be82b8407e
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 690KB - Virtual size: 689KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

flag_dat
Size: 512B - Virtual size: 18B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 495KB - Virtual size: 494KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ