005f3faf517b139a374ee1f75c745c019a6ebbbe109d76eaee3d4b0743b74cc5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

005f3faf517b139a374ee1f75c745c019a6ebbbe109d76eaee3d4b0743b74cc5
Size

22KB
MD5

b6a8ddb384d765960dd2d97049c0ceb0
SHA1

1ec20c9edb9d6637c786c1633cb6050235685314
SHA256

005f3faf517b139a374ee1f75c745c019a6ebbbe109d76eaee3d4b0743b74cc5
SHA512

2d9db5549ddd729fdac686529072ccaf8f220323f9eff7824170cdb3d8cefea30f299457ae830b8c2b910d0ef67d6ab1eb914f41658a424f15bb06a829022df0
SSDEEP

384:iKp76y2p76Ap76+PJ762NgkBGLYRN19wEoSx3CvZz6HuEzAZi5Boc5tu41sxi3ho:iKp76y2p76Ap76+PJ762/zFIhzikw5KT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
005f3faf517b139a374ee1f75c745c019a6ebbbe109d76eaee3d4b0743b74cc5

Files

005f3faf517b139a374ee1f75c745c019a6ebbbe109d76eaee3d4b0743b74cc5
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ