196a5c384fbc3c3d326b2eadc2061318 | Triage

Sharing

General

Target

196a5c384fbc3c3d326b2eadc2061318
Size

44KB
MD5

196a5c384fbc3c3d326b2eadc2061318
SHA1

005566d925d1271d5f1df700bf63b985cf50777d
SHA256

f9d82fcc0c6499d0466bce9eb13727c7912feef3861957e05c53ee9c2646c9fc
SHA512

de355e3dfd3f90d810800c086b4c1c1a8124030c7d8548fb9e9ac3db1f6e42aaa9189c8f9b4ba9cdd523aa18af7e7803c4e36719ca426178697fbeeb6ef8b0b7
SSDEEP

768:+PUAbOeEJgWOTzGjWsULa/HZ7okrVv8Fe8tZ/aCv/qyKwrp:UUAbqbULYhVUk1Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
196a5c384fbc3c3d326b2eadc2061318

Files

196a5c384fbc3c3d326b2eadc2061318
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ