2902f7ba556f9db5f304640552c51284 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2902f7ba556f9db5f304640552c51284
Size

234KB
MD5

2902f7ba556f9db5f304640552c51284
SHA1

4c97abbe544df31d5e61bd2f9ed29a93a5986d9f
SHA256

4a72f887ce916e9eaef552c54fdcdc51dd610b3b5c92528956341281bdcbed82
SHA512

0d5156c80884aff298c90887513045acafe3cd246f18eaf2593c56ad4095ea7c2d373421cf90851a0786ef229d6daadb5824bd4b344c412aaeb1afa2e706f5c6
SSDEEP

6144:Cui8IhDr4t3qeCwbiJxb+FIoK3ShRGrQWMtZXmxroXfgI:Cu/Or4tZWJwFasEMtZXmxroXf9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2902f7ba556f9db5f304640552c51284

Files

2902f7ba556f9db5f304640552c51284
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ