0dd21747946366aed732ea72b39b77a8 | Triage

Sharing

General

Target

0dd21747946366aed732ea72b39b77a8
Size

15KB
MD5

0dd21747946366aed732ea72b39b77a8
SHA1

42bb2189b01125978d9e55316714d58397fbe506
SHA256

18db85279892e43c456dda1f2225cea80748b380d880f323c85c05306215989d
SHA512

0d0c8cf96b66c1dee7001d1f70a6edffb21591a9a6da684b607f16562f87f3c137360328b7530e562e8e90cf622f7ebe1c5ea381f4a03dcb5a8c032c6e4c629a
SSDEEP

192:Fw3WYi1gMYfmDYR1tUpm2ZmsLKnloY+45QQJtIhfGNev8fPRtO:Fw3WYimRX5+XLV45/QfGNm8fP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dd21747946366aed732ea72b39b77a8

Files

0dd21747946366aed732ea72b39b77a8
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 870B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ