18046faa65d9027214778b8d61a2ff92c4c43aacaa05c99a4fc46d3119af55d6 | Triage

Sharing

General

Target

18046faa65d9027214778b8d61a2ff92c4c43aacaa05c99a4fc46d3119af55d6
Size

833KB
MD5

cccc7f5648739a0339ab8475810b05eb
SHA1

ea2c3245ced87c11e3bb862fca1e1499f954f0d2
SHA256

18046faa65d9027214778b8d61a2ff92c4c43aacaa05c99a4fc46d3119af55d6
SHA512

b858cab4bd98d219ce93959d2a95ee645c5868ef685e4920db8e180bcf234d58c2bc382a9d95b48144cac49d1c0d4abf964de9c8d910270cbddb00975c2581d3
SSDEEP

24576:rgQKL7qH3OhqnGmhMAFspPEKYX5NWfWUpc9p8ld3qb/LFLzu4PU6C19w2wfCUEr8:Hq7G3OhqnGmhMAFspPEKYX5NWfWUpc9b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
18046faa65d9027214778b8d61a2ff92c4c43aacaa05c99a4fc46d3119af55d6

Files

18046faa65d9027214778b8d61a2ff92c4c43aacaa05c99a4fc46d3119af55d6
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 830KB - Virtual size: 830KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ