99f789b3d9ba412099a4b768b75a76f092ce82b1c4f1cf1edf04629b29786d49 | Triage

Sharing

General

Target

99f789b3d9ba412099a4b768b75a76f092ce82b1c4f1cf1edf04629b29786d49
Size

13.2MB
MD5

0fa42cd04f343c1ec434ad75c44297af
SHA1

9ccb549edcd2705ecfe94292f34afa4522e83171
SHA256

99f789b3d9ba412099a4b768b75a76f092ce82b1c4f1cf1edf04629b29786d49
SHA512

be71cf45d812ba811e51ddc1cd7353076a0d84948edf32ef31ae020e512b6bda3e89cdb7eec231a7c4713dffdff1410bbbd48df962480d8a1f5a6d324859d51d
SSDEEP

196608:a3oXwA8HwwkXXEffSRCKCCbfDCCCqCCCSgACCCCCCKWfFoCCCCChzCrIxaBcaBcW:afGftfoPP7fAfKf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99f789b3d9ba412099a4b768b75a76f092ce82b1c4f1cf1edf04629b29786d49

Files

99f789b3d9ba412099a4b768b75a76f092ce82b1c4f1cf1edf04629b29786d49
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13.1MB - Virtual size: 13.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ