a5999a79d007b34cc713304572861819b2990738243e9f5d2cf1acafad524286 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5999a79d007b34cc713304572861819b2990738243e9f5d2cf1acafad524286
Size

3.7MB
MD5

120acd8f5935ac5749c4c36ac91db672
SHA1

4e6ec7d1b0f9a6760bfbb03d54b9c1c53e7ddda5
SHA256

a5999a79d007b34cc713304572861819b2990738243e9f5d2cf1acafad524286
SHA512

b47b2dd0121067e702c600c66f7560f8d67933bf7b2ebb6df54fe4ca034c9a9de2c1af9c978bf88d447ba3d82cc0f18e6a12deb14c0e197e33a82c2f24ecbc5c
SSDEEP

49152:ZcFu+tE0ZGkMEybEM7Jsd1sTITTU5KaWeXnHU0zEkF0Zh0I+j:Z29tEPbh18TTU5KaWeXnHU0zEkF0oVj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5999a79d007b34cc713304572861819b2990738243e9f5d2cf1acafad524286

Files

a5999a79d007b34cc713304572861819b2990738243e9f5d2cf1acafad524286
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ