13a0eeca4585d1c090dd6428c53e7264ff242e7f6beddb24f0d1e1f95e980e65 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13a0eeca4585d1c090dd6428c53e7264ff242e7f6beddb24f0d1e1f95e980e65
Size

5.6MB
MD5

04f198ad01ee0a12d7488ed5bcb5fe50
SHA1

106673729622bdc99d3d56c70065df5b67c0dfb7
SHA256

13a0eeca4585d1c090dd6428c53e7264ff242e7f6beddb24f0d1e1f95e980e65
SHA512

1d4dc3493f755530cc54b9b0aa670b6931b655e297325488012c3f7cf8c6594cf67a19a703ce4ae50ca5e0b59d0d475cedd24dbd071f35be7aaa3d1cf5d17d37
SSDEEP

49152:pGNcRPkwzT2kmM/DlAC+EJ/HDRSnTf+ExHfZfAHkDBcMFF4eyBjguWo7mPOSoufL:weRdXYMvH8zlBc+OeyhguTWOSoOXpC1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13a0eeca4585d1c090dd6428c53e7264ff242e7f6beddb24f0d1e1f95e980e65

Files

13a0eeca4585d1c090dd6428c53e7264ff242e7f6beddb24f0d1e1f95e980e65
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ