279dadf945807da914f4fec790f391e4d2ca995e4ff3daf08186225f8708dd6c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

279dadf945807da914f4fec790f391e4d2ca995e4ff3daf08186225f8708dd6c
Size

158KB
MD5

0a4fa664e89cff0510cba02cec89f31d
SHA1

6c5e82f1be0be65185ab202617fda5a4dcdf9050
SHA256

279dadf945807da914f4fec790f391e4d2ca995e4ff3daf08186225f8708dd6c
SHA512

8ad979a105c69633771a45b4e1d18ac48322ef0839cb3482ce89197731fa799e3403778eb5cf61dd7b6d01ddfa2c4d7fc899a17325162b088b9afbbffeb659e2
SSDEEP

1536:gHMvC8vZUJz9O5J4dd+NX86OGUHhwG9IGn5d45hhcdTUXiy8odgmpgegZE11111d:hBZEagd3iG9IGnw5ARUXiiPga

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
279dadf945807da914f4fec790f391e4d2ca995e4ff3daf08186225f8708dd6c

Files

279dadf945807da914f4fec790f391e4d2ca995e4ff3daf08186225f8708dd6c
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ