5192b1aaa8f755f0a0dd96836ec80d4f208b0403ff3d755e9a112e7efb1ce68f | Triage

Sharing

General

Target

5192b1aaa8f755f0a0dd96836ec80d4f208b0403ff3d755e9a112e7efb1ce68f
Size

791KB
MD5

12fdbbf78bb7d4caa336ccf05d762bcb
SHA1

9f439bdb93964b183adfe262f6a84f01ab14a959
SHA256

5192b1aaa8f755f0a0dd96836ec80d4f208b0403ff3d755e9a112e7efb1ce68f
SHA512

8f6ff68f56557be44173992f08849754c55b0f0e05c88d36ddaf15de52b42f1e1491d18d73b5862286f4b99d7a92a7c07ce7b7572a6f965c7f67a7784f068b9d
SSDEEP

12288:h8Gb/j8/CReqWgbuqeuofL6KjMV/MnTlmpGscZpUKzJsqp5GkTyov5hXN7n0cAk2:h8GTHWgXML6KW/oUpVq3t1kda5JN79d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5192b1aaa8f755f0a0dd96836ec80d4f208b0403ff3d755e9a112e7efb1ce68f

Files

5192b1aaa8f755f0a0dd96836ec80d4f208b0403ff3d755e9a112e7efb1ce68f
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 787KB - Virtual size: 786KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ