679e60230df99d5dd322881fd580b39c | Triage

Sharing

General

Target

679e60230df99d5dd322881fd580b39c
Size

436KB
MD5

679e60230df99d5dd322881fd580b39c
SHA1

81bb69639a170f088a721f9c737bc47494c26f83
SHA256

da0cabe23c7bdb7cc714a19584aecfe39087f9f93b156d5b176cfc1c1b582810
SHA512

c44d807bcbd62660c4760f0411b06a753ac54d01ff8781db74a8f472e71c3d8f535c1142c5d91a29213119a1cc2ef0d2426e5ff880becf724234183b42b6af07
SSDEEP

6144:2/qFbO4bGNqL43QWqqPheG/lCcC9msYwXEvEsdqthb5cC9msYwXEvEsdqthbO0:2/qPKQWJ3/2wsYwXFtlwsYwXFtj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
679e60230df99d5dd322881fd580b39c

Files

679e60230df99d5dd322881fd580b39c
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 405KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ