rAWB1164667916[.]exe | Triage

Sharing

General

Target

rAWB1164667916.exe
Size

581KB
MD5

fa681a6ce6ddd34f6c571a38fb52e867
SHA1

6ad073d0b36536bd38b976a13bc9479e1febddc0
SHA256

4f0c6b86c73e464ccd681c2de2a1bd2d0aedb75625afabc632dddf32c0f243b8
SHA512

dd67578a174c322aa0f054c339249cea383433f442c12a001503726ff510c938769b64fd2441bc8e6f34116ea937af0b0455a41361b42f4db3ad7318c8820ccf
SSDEEP

12288:wpC6DCkc1oOJJbOGXzPAsHPWB8BpPPNkkEZGD22fPs0NJEG:g6VOGDAsHPNBpPPNkkMGDTns0z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rAWB1164667916.exe

Files

rAWB1164667916.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 579KB - Virtual size: 578KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ