AWB 394647921960[.]ace | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AWB 394647921960.ace
Size

649KB
MD5

104dee86ebee2447ad1ecdb0acf885f9
SHA1

a323fee5ff58d572ca4f323e7903ae6db793d06d
SHA256

2e93bff2a6589b12db9d41d8109c9b041284cd5412c172a747b39a82c9dfc760
SHA512

38549ec13bc8bcc85e8967b659c72250645ac0e91e0369175910dc00d98ec80e4c5053e718283126ca3e9233e06e33ddb18f08cd591aa3cb8d124aaf86b6bea4
SSDEEP

12288:Bkp682r//LLzDtOkKgjR/nb0GSZ4O4Z2E3T87gItMVn1n/s8X9NxSymeOMBTBek3:Y2XzDDf9/nSibEKQgItF8XT0ymeOMBn3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/AWB 394647921960.exe

Files

AWB 394647921960.ace
.ace
out.ace
.ace
AWB 394647921960.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 849KB - Virtual size: 848KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ