2b6443a5cf1ba59de6908b9904bdc74848791f74d5dc8a83e73fb7aa40d7242d | Triage

Sharing

General

Target

2b6443a5cf1ba59de6908b9904bdc74848791f74d5dc8a83e73fb7aa40d7242d
Size

2.3MB
MD5

ef9c0ff70757e5358e68f3ec2beea1af
SHA1

7e8e4936e58a6e262e01d4d4940f63461bb2b83f
SHA256

2b6443a5cf1ba59de6908b9904bdc74848791f74d5dc8a83e73fb7aa40d7242d
SHA512

ed178b62a0084ecd9ac266a763ba3a992398f404220a9bf9c7b4a36b6312f4d14f8a54023f6a2b55cee5cad70ed9b064e4c6f9c97515d21f9c139244bfa55850
SSDEEP

24576:PWE23OclE7u2SVeqUC6bsXJpYIc/khSJFqRXFF+XG5mlixQ26i7NwifDe23CmDTX:ZrOaAo9PzCzWGC/Q0cdoP0hEU7bUuXT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b6443a5cf1ba59de6908b9904bdc74848791f74d5dc8a83e73fb7aa40d7242d

Files

2b6443a5cf1ba59de6908b9904bdc74848791f74d5dc8a83e73fb7aa40d7242d
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1024B - Virtual size: 690B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ