24bd790bc9427021121ec0e318db93369c2d893e40309f7083f178d3a5819161 | Triage

Resubmissions

10-08-2023 13:02

230810-p92wxach32 8

Sharing

General

Target

24bd790bc9427021121ec0e318db93369c2d893e40309f7083f178d3a5819161
Size

419KB
MD5

d811a57bc0e8b86b449277f9ffb50cc9
SHA1

cdab34eea2dfd5e96412e34c0b3eb090a9661377
SHA256

24bd790bc9427021121ec0e318db93369c2d893e40309f7083f178d3a5819161
SHA512

5b569f0cebdc006125ac37ee0e333a22a35189214b5c2ab05671e7c307936c1d121a9afd7c48ce5283435c755d82110ce70adffd4e20570c3d4f4680962a7dfa
SSDEEP

12288:ZvtSEEuEE3EEMEEzEE5EEOEEmEEAEE2EE6EE3EERhXz+MbfR1nYm4BJ1B4ywtT5m:Zvtk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
24bd790bc9427021121ec0e318db93369c2d893e40309f7083f178d3a5819161

Files

24bd790bc9427021121ec0e318db93369c2d893e40309f7083f178d3a5819161
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 416KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ