79edf3fa3afb24845008e5b0a45d12e9b3779063b0ff7adf099f94cd7d20a3a1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79edf3fa3afb24845008e5b0a45d12e9b3779063b0ff7adf099f94cd7d20a3a1
Size

1.9MB
MD5

9a5c2202df5961ed1fa0e1b7ad2a30f9
SHA1

c5411dfb0b3ddf3f4f7e55ffbf5ba0ac44b4863a
SHA256

79edf3fa3afb24845008e5b0a45d12e9b3779063b0ff7adf099f94cd7d20a3a1
SHA512

d7559649c8bedcf3c291dbd8ab27f6fc4b51f9b57470d4e013f0cbd7bd4fca2d770f8b8c32b2b838f7669a49fc39686524146f2b53c159fe4aa79b13700bee48
SSDEEP

24576:CnBuO6h17g9Pv1w+FusycGYvnDwQcW27Hy7XnTc7JV9dYiVt8w05FWRmeBZMhGrj:C0O6Xz22sXA7dY7vvWRBzM0TO6X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79edf3fa3afb24845008e5b0a45d12e9b3779063b0ff7adf099f94cd7d20a3a1

Files

79edf3fa3afb24845008e5b0a45d12e9b3779063b0ff7adf099f94cd7d20a3a1
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ