5e20a6acf6cfec604e8f1fa9421385bc | Triage

Sharing

General

Target

5e20a6acf6cfec604e8f1fa9421385bc
Size

606KB
MD5

5e20a6acf6cfec604e8f1fa9421385bc
SHA1

d4e656c2edbf2ab96a212e98117cacffd2b3493a
SHA256

e5b3f5c88055487475981257a3146b756a653845e01c66141d3547192805a8f3
SHA512

122d9a19db8ed021ee27e20b8876a6822648cb89185d7125fdf5533fc69f43cac8c352324ede984a4e54fe9694e3a0b2ee6cb4e821449f93f94cc0621d9ca693
SSDEEP

12288:yuqLBn99JFB5NzbTjOzt+4Hhz9PAAETGVwPtM1k2:ytB99rB5ZnjqthBBWT9yk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e20a6acf6cfec604e8f1fa9421385bc

Files

5e20a6acf6cfec604e8f1fa9421385bc
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 604KB - Virtual size: 603KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ