1bafac6637f3bb17204b346f479409d5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bafac6637f3bb17204b346f479409d5
Size

842KB
MD5

1bafac6637f3bb17204b346f479409d5
SHA1

afa4a547aac220c213c6e64b73220976b3be17a3
SHA256

c6ff402225f5d53a08b8bdac4f6a21c91954f0bf8084b25d018e994cb5367b97
SHA512

0d1d6fe753abd553b079747621f95faa7d0c8822d68e0fb66be8fdf934edd4c8a687c4c94f3d8e3d40985fb6c52692a9942862c117d76a0e2525c839ca49310e
SSDEEP

12288:OdUc6HpmFXSgD3YT/5paA+r0TBmLIU80ZOC6:EM8FXSgDm5fYMmLIQO5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bafac6637f3bb17204b346f479409d5

Files

1bafac6637f3bb17204b346f479409d5
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 675KB - Virtual size: 675KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ