aa4bf2143b0890be96617075d93065ae39ae9a41c090fe05c97b2449c2443740 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa4bf2143b0890be96617075d93065ae39ae9a41c090fe05c97b2449c2443740
Size

19.9MB
MD5

104c3da2cedfb7f98103f4d4b203b64d
SHA1

d529c19ca9434b9f4b9f152576fe2e8d7bf2a9d7
SHA256

aa4bf2143b0890be96617075d93065ae39ae9a41c090fe05c97b2449c2443740
SHA512

92939ba673ad9c0e2736bc5ec3d8bad338d653a284b3aeff8da76c3f5c30c6ab54f7064b31d55ebd2ee7771509da3e794aa5dcb64199651c53f7b6a0977d18c5
SSDEEP

393216:7rYPeAGlUA1JxaxvgVWClEX1DqchUkrqCyGSb+O8qmQ/t:ieMAFaxsWC6QchUkrqvV/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa4bf2143b0890be96617075d93065ae39ae9a41c090fe05c97b2449c2443740

Files

aa4bf2143b0890be96617075d93065ae39ae9a41c090fe05c97b2449c2443740
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 19.9MB - Virtual size: 19.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ