dedd0f018a1251f3a833b06e258e85674e54bb3f3d837d1ec5916d6c614ca619 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dedd0f018a1251f3a833b06e258e85674e54bb3f3d837d1ec5916d6c614ca619
Size

58KB
MD5

9909be2efa3dcefaeb6fbd9a3e5f204f
SHA1

d565a7ad148c9ddc61f0498a4f80cab2a8f4812f
SHA256

dedd0f018a1251f3a833b06e258e85674e54bb3f3d837d1ec5916d6c614ca619
SHA512

dee2721ce3c4811dd3c42866a389acc66d8d78eedd03cf3bd7fd377f18ed48a8f41616243338c253d83684f86dc93db5ba2280dd68536bdc87bc5c4b193706b1
SSDEEP

1536:dtJd/noYHJosxyzPkCWAoYoJosxyzPkCIV:Fd/as6s0s6OV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dedd0f018a1251f3a833b06e258e85674e54bb3f3d837d1ec5916d6c614ca619

Files

dedd0f018a1251f3a833b06e258e85674e54bb3f3d837d1ec5916d6c614ca619
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ