dab540109675f8680f497b14f62913bc6ffa21c28dd4604f480ea5a9beffaff4 | Triage

Sharing

General

Target

dab540109675f8680f497b14f62913bc6ffa21c28dd4604f480ea5a9beffaff4
Size

5.7MB
MD5

2e47689f4002fe68d190b2f939f683c7
SHA1

f389e3443edaf6886220427b65a0688cd87de873
SHA256

dab540109675f8680f497b14f62913bc6ffa21c28dd4604f480ea5a9beffaff4
SHA512

398a682c426be43396894cd8d5dda25f6308f191dab236496522e524a69ceacd31019f238034e27af8af2155b017bd50397a6b3b939441a0e2fdbc034f22b57b
SSDEEP

49152:yGp6XDc7aLIQEsh6+jSLwTQAmAo5wkIdsPSVLx8GaNrlmV2yA5N/DYpzeiIT6QAM:H4X50QIT8gN5mhAf/2zeLTVAuPkZSE2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dab540109675f8680f497b14f62913bc6ffa21c28dd4604f480ea5a9beffaff4

Files

dab540109675f8680f497b14f62913bc6ffa21c28dd4604f480ea5a9beffaff4
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ