97293[.]exe | Triage

Sharing

General

Target

97293.exe
Size

3.7MB
MD5

cdd69b786c00f25344711b3cedcabf1e
SHA1

a5a8e43d56ccc07d89a61cd60514a711b129992b
SHA256

1e32754c58c05364d4948c25cb1a1bc6ca99e63353dd5980b52ba3d5cc02fd6c
SHA512

46ca398a424f8aeb8f8da6a3dd9833948e88c6d0feee1dfc4a11e6a2b6ac39d970ad200b6d1f68d9114042d52e7e7ce776547a7d22b2fd2cd251d8f604e49553
SSDEEP

49152:HsOCffWrLGJ7/GrC97IJQ1EUffsNnwr1asV:s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97293.exe

Files

97293.exe
.exe windows x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ