PO 5997 - AKTINA CDS GmbH[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PO 5997 - AKTINA CDS GmbH.exe
Size

887KB
MD5

40e9f6368bb2c7f5f5ca5a1d7644513a
SHA1

83b320e59b41e0c158f7e3401c334e5ed66c5bf1
SHA256

9b58155670290b5c9a70c783c2430a1614cd855858e2b582ccd20b3ea6aeaa56
SHA512

183f94ec58065386a610165cd0ff8b45c42a017c0762c345b4a672b3b75cf2c66be9013c24089852ba5e2e26606f28cb48d074505e6ea7285bfbe31e428e1d09
SSDEEP

12288:SUZ9Fcwsr4u5vOzJMZBTImnnGw71bDlMH8p+tBoIpyPvkb4WXuSGrP7r9r/+pppJ:SUZ96wskIWeFnGA1bDlCPa1Se1qR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PO 5997 - AKTINA CDS GmbH.exe

Files

PO 5997 - AKTINA CDS GmbH.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 669KB - Virtual size: 669KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ