1619889daff12ef2ff63a8e7a2f6a03db25627c943aa007758213f3afc67bd14 | Triage

Sharing

General

Target

1619889daff12ef2ff63a8e7a2f6a03db25627c943aa007758213f3afc67bd14
Size

405KB
MD5

0ad04f3c20a60ed2f9b0371e507b6a91
SHA1

8fb9493766d8d171aba56ba04a7ff6d71db838b4
SHA256

1619889daff12ef2ff63a8e7a2f6a03db25627c943aa007758213f3afc67bd14
SHA512

46777b7fdda9969bd41e9f9793e50003cca92acf2d55cfe8b7ad2e282ea22064d390c75d934084f7a0b6352accd34301bdda9210787a8d12dfd6ec7d658aaa36
SSDEEP

6144:0MXCuB7RZDCXWvOW8i7gjBxEeiFLh6lRKHXnOe:06lB7O+OzPBPixhrD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
1619889daff12ef2ff63a8e7a2f6a03db25627c943aa007758213f3afc67bd14

Files

1619889daff12ef2ff63a8e7a2f6a03db25627c943aa007758213f3afc67bd14
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 336KB - Virtual size: 335KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ