3169c79375113f118bf68293e83ea0faa4a5fd26082def5a52ef1a5d0e205b5d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3169c79375113f118bf68293e83ea0faa4a5fd26082def5a52ef1a5d0e205b5d
Size

5.0MB
MD5

d0424a51bfc5c568860fc654535f00c2
SHA1

242e8c341d7cd13ae3a1f9550e04058e9fe6cdf5
SHA256

3169c79375113f118bf68293e83ea0faa4a5fd26082def5a52ef1a5d0e205b5d
SHA512

ce8c4c85a5eb8824a378f55bc94e42e6dbf32e9712f2fbd3d435b756958de08ca49ba82e914f743754458332a6465e2b61937e333743ffab37f23c009264e90f
SSDEEP

98304:MRJHONmKlVhH4hAzoaG/cmJrxBuaQapabEsXF:SHO/kcMBuaQapabEsF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3169c79375113f118bf68293e83ea0faa4a5fd26082def5a52ef1a5d0e205b5d

Files

3169c79375113f118bf68293e83ea0faa4a5fd26082def5a52ef1a5d0e205b5d
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

??4_Init_locks@std@@QAEAAV01@ABV01@@Z
CoreGetShell
DawnUiGetShell

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 448KB - Virtual size: 447KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 968KB - Virtual size: 968KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ