af5181b58209a8a6e973d806ba6e2321e7aba08b3bd56012d4f159a7b2f51ac2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af5181b58209a8a6e973d806ba6e2321e7aba08b3bd56012d4f159a7b2f51ac2
Size

664KB
MD5

26e4291f7b01ed40adc50972f2f8c5c2
SHA1

dcb8a688e48e2b71488a40fd98f44f1baf5a2797
SHA256

af5181b58209a8a6e973d806ba6e2321e7aba08b3bd56012d4f159a7b2f51ac2
SHA512

9828051c7da802b8a7d55ba767bd3be2e1066c3cb046af2da71eff853fc888fada22f619bd1cd915137e4f0fc674cfcfed579de8226682557ce24d888ff417f0
SSDEEP

12288:6ne2XNumB0v70Wy3iMsdZRmMYKMQwiuNqE1TnLceumZKkZcNutXeg6IFDFw:Q4yo704MYeQw55Ybmgkau4ILw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af5181b58209a8a6e973d806ba6e2321e7aba08b3bd56012d4f159a7b2f51ac2

Files

af5181b58209a8a6e973d806ba6e2321e7aba08b3bd56012d4f159a7b2f51ac2
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 662KB - Virtual size: 661KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ