50f7eba68055ebe8167a8c5f34b7019ab0a8479468a7e2353c60942453c07c30 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50f7eba68055ebe8167a8c5f34b7019ab0a8479468a7e2353c60942453c07c30
Size

560KB
MD5

2cde351b4bb770f279553538314f9538
SHA1

ae66da1ac4427a9eab5c019a8dbcd2aea2cb1204
SHA256

50f7eba68055ebe8167a8c5f34b7019ab0a8479468a7e2353c60942453c07c30
SHA512

4e5f2518ebf9f46c6d688123e79f47747f21369587d5c1062a7284da4ad39063dfdc9cded12c9ec539255de44c1f80f636a4e588a9042bc054b0bb65ad834035
SSDEEP

12288:aN9lpaeyvdCjxKUGe8miQSs/4Kny3KEtKJ9zbgVHebH7s9m:4papkj8ezl4DIgVy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/chima.exe

Files

50f7eba68055ebe8167a8c5f34b7019ab0a8479468a7e2353c60942453c07c30
.zip
chima.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 768KB - Virtual size: 768KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ