cfa42b0a316c5582e5fe06f976a313817ba2677cabae9173fe254c1a1a04940d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfa42b0a316c5582e5fe06f976a313817ba2677cabae9173fe254c1a1a04940d
Size

10.0MB
MD5

214580fa530521faedfba8ee0c656258
SHA1

466c8ba3453c21cef5afc11e5ba71d6538702d24
SHA256

cfa42b0a316c5582e5fe06f976a313817ba2677cabae9173fe254c1a1a04940d
SHA512

3c13eb78118e5339c7e5a08a874f99e2db75fe1d05084cd762d3702e8cc7598ab16ab028bfd96701f399be5d7d72a7de491db6a24d289e7cb3ccb802d6163995
SSDEEP

196608:CVunQnuxtDRpJLrVTwlg13uMiFLgHb+B36NzkUWwwC9/TP9ndZZ:CVbux9Vr1vuNFEHkdCZRndn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/.exe

Files

cfa42b0a316c5582e5fe06f976a313817ba2677cabae9173fe254c1a1a04940d
.zip
.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10.4MB - Virtual size: 10.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ