be04038c48952454db9742caf48fd077db32aed2650e90786a39a9b1a26ba87f | Triage

Sharing

General

Target

be04038c48952454db9742caf48fd077db32aed2650e90786a39a9b1a26ba87f
Size

4.9MB
MD5

0ff5945ced283caa0621bd9e7b087763
SHA1

5cbf68e04eb294c1edcf272fd98d68a2ef139c14
SHA256

be04038c48952454db9742caf48fd077db32aed2650e90786a39a9b1a26ba87f
SHA512

25802856d4cc73dee14a9b96b35f8ff3c0128638a8a1deb7bbbfb3209e9f0161d13c9c17bb7632cf5428dca1a1939be84036fdf473c6c853c783fb22ae66f9f8
SSDEEP

98304:7TedAcQ2Ro3GJtYhkf6zMBiJtpOYs0FA088A1kMfsuG:veCl2RKatUtz91VFAD3kulG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be04038c48952454db9742caf48fd077db32aed2650e90786a39a9b1a26ba87f

Files

be04038c48952454db9742caf48fd077db32aed2650e90786a39a9b1a26ba87f
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ