middle | Triage

Sharing

Copy URL Twitter E-mail

General

Target

middle
Size

584KB
MD5

ac2213056b0ca6623d1df204fed27b6e
SHA1

5b9fbaab4f1e9c5b56d8530892f74506ad606b4c
SHA256

797517250d674f0a9e0e46195b298a092901b1824d81d39b5ccc98ea6261be9a
SHA512

d314a71b8ae8dec3e682e10ba04cfdf2a697c4a58f71bda23cd25225d706d227729a38c5cf1f6f14cbf7c03d9787ae55727c280f5bc861bb2ab7dff0d1755ecd
SSDEEP

12288:bhRayLk3zHtkFlYwqkAOpOsA9N9N2Uww8vvAnKU1:b2/zCFoqIN+DAt1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
middle

Files

middle
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 512KB - Virtual size: 511KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ