85004eae8549b3846404027a8c7d245946d9c997aaca116177063b4b17e87987 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85004eae8549b3846404027a8c7d245946d9c997aaca116177063b4b17e87987
Size

513KB
MD5

295d28dd7910d601ad206a9bf5f3b56f
SHA1

d93088220d7bdf3dfd5a0ba372f0473c2323c335
SHA256

85004eae8549b3846404027a8c7d245946d9c997aaca116177063b4b17e87987
SHA512

b95c6450a8deebcea16c849e39db763d47004b64ec802021716a32a0957ed08376a941f6ce39149da43d7cb9e7b8e880f7d1f54d6baeea1b3f006ce030fa47e7
SSDEEP

12288:zch5W0inahgqsC49J6iGB4lnKxyUqjiTtt54b:zuCans1D6wqfqj8j54b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Mobi.exe

Files

85004eae8549b3846404027a8c7d245946d9c997aaca116177063b4b17e87987
.zip
Mobi.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 594KB - Virtual size: 593KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ