eb3dc15c84251826516cd315e775b92bc839c47619a50e80611148757fd925ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb3dc15c84251826516cd315e775b92bc839c47619a50e80611148757fd925ea
Size

1.2MB
MD5

c8ca5877e48f1b98b9705d5445cfe6cd
SHA1

661b2cd71e18f254e9e473ca423a860b928dd129
SHA256

eb3dc15c84251826516cd315e775b92bc839c47619a50e80611148757fd925ea
SHA512

71d6b8c33910bf182926b38fb54d227f6d3386b78a7e549d0335be0c2d54dd2e0be392fea59a159b47fd25ffcfd2fd6d9e2a9ccc0a0f5ba58e28d5fc17e55257
SSDEEP

12288:ZPF2epaKfC0sE4DtIeh3rrIJJ63IACRdDz3+9LcTOI7x7:rHaKfZUaexrrIJ1nDDZTOC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PROFORMA.EXE

Files

eb3dc15c84251826516cd315e775b92bc839c47619a50e80611148757fd925ea
.iso
PROFORMA.EXE
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 643KB - Virtual size: 642KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ