172950c400ca7f18995ed4b2a478c34c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

172950c400ca7f18995ed4b2a478c34c
Size

9KB
MD5

172950c400ca7f18995ed4b2a478c34c
SHA1

1df44292f1c3119955efe0a04db665493ad5ec9f
SHA256

20c92c5b0e053727aa7ab237d69fff880fbd8b7f3b21894f95b34b8549dbb795
SHA512

9957e167a1d9c4d0e7c13181d6de37773cbd183ab5bd96f74e197fcc828ae1871c6abc01e99f1ea531c1f1cf3c0ebceb59889f4903683cb10b16535160bfd70f
SSDEEP

192:dBksu/rN3y+H7eMZZ3W93VnjdwCzeo3cmh2L:yZ17eM6FnhwCbsmh2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
172950c400ca7f18995ed4b2a478c34c

Files

172950c400ca7f18995ed4b2a478c34c
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ