fef29da68414f94de01c28824d310dfd | Triage

Sharing

General

Target

fef29da68414f94de01c28824d310dfd
Size

2.2MB
MD5

fef29da68414f94de01c28824d310dfd
SHA1

b8c4f41d11e2227bc358277fe71f580aec667ccc
SHA256

4bf216f4b7d5dd86270ed3bbe6d152b4ac9a4cb2508cb8a74d3022f41a7ea9d3
SHA512

04c38dafb438f490295cf826be492271175a6d6c0bffa8f0852423cc4d787469231ae4bb04df1de00733bf6bcbb9bddf87cf73141ce5f3d525923cf47b6641ed
SSDEEP

49152:UOKYnv9MErOO53RTqtiaakOElMaFLkuHF+3j5D78OBU:uQ9NrOO536ak77Cs1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fef29da68414f94de01c28824d310dfd

Files

fef29da68414f94de01c28824d310dfd
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ