51b986922f7e81cbe0baed7b66475617 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51b986922f7e81cbe0baed7b66475617
Size

1.1MB
MD5

51b986922f7e81cbe0baed7b66475617
SHA1

691284ad89778fab9db3242396955c28f74af7bf
SHA256

fb15e4914e1e633562be704f67073cd3c0411968eeb0db16271d756b961af252
SHA512

ea38107f4d47b168e885c4b97ee159d8e1393faf715c075b4728eb92c798c846096f18e2b95e2177d8d99846f3d4befd0cc3524611d7a8096bbf19b1d2990bbd
SSDEEP

12288:Hl6wYIOBHQbKLcPp1yQYJBMgUVyS22v3U9gLKfWFrvaEg1gNhvA45zs9WyBqrFLW:F6wl+mBAZZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51b986922f7e81cbe0baed7b66475617

Files

51b986922f7e81cbe0baed7b66475617
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ