f64bd4d59f5140495cb059f9a86e115e1ccc7402efa3e6e97b6f347ea00f9abd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f64bd4d59f5140495cb059f9a86e115e1ccc7402efa3e6e97b6f347ea00f9abd
Size

702KB
MD5

7bd2189a611a8f5da1018f83515382b7
SHA1

e3b6b7411d18fc43943973eb9a9b2eea36350935
SHA256

f64bd4d59f5140495cb059f9a86e115e1ccc7402efa3e6e97b6f347ea00f9abd
SHA512

2ecb474336c3611690619848e66245a2c7168d8e562c23456e66926eb72ed816e9f73ff902e1442a59327cfd383fb846a40f006a019c4ad794b19294f3c8a624
SSDEEP

12288:VlCUgtLaB0z3GHWHEnARWPMPLRXYTr4DDomxIMp0zoYX0:VgU+3g86AR5dITkDDeP1E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DN 65994.exe

Files

f64bd4d59f5140495cb059f9a86e115e1ccc7402efa3e6e97b6f347ea00f9abd
.rar
DN 65994.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 776KB - Virtual size: 776KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ