2d1cb79740ad3c65afdc693f5d5bc31c425d88a33bcd2d4f6d8044231b1427eb | Triage

Sharing

General

Target

2d1cb79740ad3c65afdc693f5d5bc31c425d88a33bcd2d4f6d8044231b1427eb
Size

654KB
MD5

eef5220a2f4e2271672abc644e563e45
SHA1

cb551ad223063517d67e18622044b406ef40c9d3
SHA256

2d1cb79740ad3c65afdc693f5d5bc31c425d88a33bcd2d4f6d8044231b1427eb
SHA512

6154d678cd118677b0d54d33bd31fcad397cc650f443c438c5cdf4e9a0a5a210a006cbe61ce7fdedad381eded57c8fe25a2c34fe1a9bef3e97f657c9738b5eb0
SSDEEP

12288:gXQnnE6+s3WsZ/lkwR939lgKFWRg1xY0VcRuaHuatAUz3huJ7XrjaJ+:gXQnnYsNHXR9NlgobVcUK7UXrj++

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2d1cb79740ad3c65afdc693f5d5bc31c425d88a33bcd2d4f6d8044231b1427eb

Files

2d1cb79740ad3c65afdc693f5d5bc31c425d88a33bcd2d4f6d8044231b1427eb
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 649KB - Virtual size: 649KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ