009c487a[.]img | Triage

Resubmissions

17/11/2023, 07:49

231117-jn7mdagc89 7

17/11/2023, 07:46

231117-jmaagsgc73 7

Sharing

Copy URL Twitter E-mail

General

Target

009c487a.img
Size

1.5MB
MD5

1bc6e043c342c726557150be1da89d80
SHA1

a4c28506d57400f376fd5d227c88615d7795e2e1
SHA256

a0595ddcb90dc68f23dfd9d276fe4179e77f646c1dfc5cbe68fbeccce7faae1a
SHA512

c6cb4fa6e23111292cdb9aa279d1c3dff7587ac0b27ed1cd685fd6b9272772ad1d0967eb21f9245a31d376102e0e001b5c03587b6aa7f4cf515b6f5009e0c695
SSDEEP

24576:4WmQM+uExCrMzQVTnf0ngIZRhH0xiPqzp:/PM+JCrPRf0Vixiyd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/009C487A.EXE

Files

009c487a.img
.iso
009C487A.EXE
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 931KB - Virtual size: 931KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ