94c9dc473c5a76806eca783dbfbacb80 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94c9dc473c5a76806eca783dbfbacb80
Size

7KB
MD5

94c9dc473c5a76806eca783dbfbacb80
SHA1

cab2395c2b7e81d2d6336cf1de34f3b8370f4b31
SHA256

0113975f62395fcc002292fd8f83b711b4c4544bd8a15cef486230dc3382c83e
SHA512

dc722acdf7ccda8fd519e1dcce2f21061e19026f3386da982c82141c6e53438a5cde9440396d86926731e4b00012b4bd03431e4c679972913b6952d08802b3ec
SSDEEP

96:2rFjzPIcPtDx7Z7s9H6B9z+4+vVL8/qrpEfkTKwS1nazNt:0tzPIclDxl7sUB5pWVQ/q+fwzS1nc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94c9dc473c5a76806eca783dbfbacb80

Files

94c9dc473c5a76806eca783dbfbacb80
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ