679e449f9a39853d8d99f31b85eb6f7b | Triage

Sharing

General

Target

679e449f9a39853d8d99f31b85eb6f7b
Size

770KB
MD5

679e449f9a39853d8d99f31b85eb6f7b
SHA1

f98e43246336835870f26e24fb107d710e477cde
SHA256

20302658c9a1a55beb8195daa7fd3d01660f9fae19d0326c83f35c16137edabd
SHA512

7217720abb645f30684fb8eedb83573a9070268873b145422ceedb6e94075f156b5d300e0fd1e71d9c3d53b93ce1f2e0e9a556d97eb8192ef7890b150a783d61
SSDEEP

12288:HkxokD22Ye1OKE+EQJcHrreRuaZuIdDrGRAZgPqpTEAmD:Hu2231OKE+JJyrreRxucvGRAiPqpT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
679e449f9a39853d8d99f31b85eb6f7b

Files

679e449f9a39853d8d99f31b85eb6f7b
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 701KB - Virtual size: 700KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ