ff0979c5c597750e4c672465262b33a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff0979c5c597750e4c672465262b33a9
Size

40KB
MD5

ff0979c5c597750e4c672465262b33a9
SHA1

f1ec86fbccfe8a00cb34fa1f7979db87d2d3a17e
SHA256

6044673203ce9d4d8c8e15108ece7d8806548637ba823ae94d46552f0749ddb0
SHA512

75763e3a4a1a7182e552ca05c602abddd1bd4a0927d1671c0c06725fc9870f0c43a1bfd3212268dcf458c681bcc22f6c5a52b18f248fcf75cf03e16b1bf2b879
SSDEEP

768:LwkHM/itbT09oJSN8HanBzrbfCWiNZEj:LrHqQbAASN8HGBzHCWeZK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff0979c5c597750e4c672465262b33a9

Files

ff0979c5c597750e4c672465262b33a9
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 179B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ