2904d779c7b831e30ad3761b349a844a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2904d779c7b831e30ad3761b349a844a
Size

9KB
MD5

2904d779c7b831e30ad3761b349a844a
SHA1

a2fead57850bab15495ede02f66dee131c63cb16
SHA256

e3ff2fa22e173c206439fcb62de559351b2b0d2efa50405a414f415922004a2f
SHA512

9c63959f63a6b6e9cce7f3a8cc09c3daef040fb380fdbbeae8585d3f84aa558fafbee2b594e57f93abe0f9d56d5e18c67c629d30fcd37a4d1884e61ed27899ce
SSDEEP

192:EBksu/rN3y+iMeMZZ3n93VnjdwCz+3/2Rxp43:TZMMeMBFnhwCKPGv4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2904d779c7b831e30ad3761b349a844a

Files

2904d779c7b831e30ad3761b349a844a
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ