5055c28ba9fde6ddfde33000bbfb39deca723bfac56c23029a54dd7bdb748e3b | Triage

Sharing

General

Target

5055c28ba9fde6ddfde33000bbfb39deca723bfac56c23029a54dd7bdb748e3b
Size

466KB
MD5

043e70250aeeec512af0393baf488866
SHA1

e5d62e24ab01bc092c1a873c4739fbdb17543f60
SHA256

5055c28ba9fde6ddfde33000bbfb39deca723bfac56c23029a54dd7bdb748e3b
SHA512

d2cb7a05eee7456e69abc530c569d1660adf7950bda6caa676f033ad646cea20cc0c13386a6431b62820050e4f02347d1a61b20e163b478fc77dacb660f3a437
SSDEEP

12288:Z6xVbj2kpoWql/z5n7jqi8cypyJglxOY2IdwOc:Z0RDydlLJi/crJg7OkaO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
5055c28ba9fde6ddfde33000bbfb39deca723bfac56c23029a54dd7bdb748e3b

Files

5055c28ba9fde6ddfde33000bbfb39deca723bfac56c23029a54dd7bdb748e3b
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 456KB - Virtual size: 455KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ