878666961d42fe694fd4fbea9c121580[.]exe | Triage

Sharing

General

Target

878666961d42fe694fd4fbea9c121580.exe
Size

3.1MB
MD5

878666961d42fe694fd4fbea9c121580
SHA1

1ac72ae0b6e165e7562de0218fc9cbaceb222d2d
SHA256

a0a256198f93aa97cd2cf5447366a13f36b399150aac09bd7a91bee8d6d04b41
SHA512

5d74e3c8ed1410b9306199985323571dd467b355250dbecdcc4c366ebc415fa685beaf4797971013afa951b3b486a50848cf91258868572b22416727289a5ded
SSDEEP

49152:a/ZzYR8VwxhkgRtPt/rap9lhB9e5FEQa7hz/WMBhHfDqLddN:a/FTi++Ql4FEQaxuMBh/DqLdd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
878666961d42fe694fd4fbea9c121580.exe

Files

878666961d42fe694fd4fbea9c121580.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ