4a2158309ba3740bd3cd501541656b7260833190143866152e2f4c40146297fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a2158309ba3740bd3cd501541656b7260833190143866152e2f4c40146297fd
Size

2.0MB
MD5

bc5c8086f5a5dcc1e955269857631585
SHA1

1f60752b62b7992c08136682b62eb7ea06dd4c62
SHA256

4a2158309ba3740bd3cd501541656b7260833190143866152e2f4c40146297fd
SHA512

8241557f2025ad329f19a28176b12a371420e2cc529449db44d097f4989fb5f70fa04aab30d8f386fb3dadd56742397a47796312efc04b59414ce365cefb7054
SSDEEP

12288:7pzOLQqvPr7uZMAx1e+nFv5SRroFvlZpk/YT0q/FXQ6LWoQIlg3jYhXWAdIVhttB:FwQUQMQt7HtdX97dx/rjQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a2158309ba3740bd3cd501541656b7260833190143866152e2f4c40146297fd

Files

4a2158309ba3740bd3cd501541656b7260833190143866152e2f4c40146297fd
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ