57a6b6f5e22c535d412f77737c0ab81c9f787d592acd265288af5fbd6d217e1a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57a6b6f5e22c535d412f77737c0ab81c9f787d592acd265288af5fbd6d217e1a
Size

6.7MB
MD5

ea1c6e8b03d4f0b6c1faf5ef97131550
SHA1

20ea268e29ff97e861ec9e1c822d545dd9a802f0
SHA256

57a6b6f5e22c535d412f77737c0ab81c9f787d592acd265288af5fbd6d217e1a
SHA512

17cd9eb09231cc7ca5c1b290b2c542f912be77fed70760d87e6a0540295ac301315cfedd44fbbe277032a2974dec8063e51de78b4f2124231b6c86e4fb16de2b
SSDEEP

49152:qY+STOMMpMUj5u+EWSPmk1hpcrJ3bBTAH1IOpZ7a/IBIF5u2jbrVBHeTDRNFtOxH:qYo5OpcrJ3bmz2jbLDuuzH8A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57a6b6f5e22c535d412f77737c0ab81c9f787d592acd265288af5fbd6d217e1a

Files

57a6b6f5e22c535d412f77737c0ab81c9f787d592acd265288af5fbd6d217e1a
.exe windows:4 windows x64 arch:x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.7MB - Virtual size: 6.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ