ff22df967cd0eff3f9b366e6b4c8430a | Triage

Sharing

General

Target

ff22df967cd0eff3f9b366e6b4c8430a
Size

1.7MB
MD5

ff22df967cd0eff3f9b366e6b4c8430a
SHA1

ae9d760c948c8d41d36dad181ec9a0e5755de9da
SHA256

3b5300bf9b284a6942159b6f751d3d48ff7373c61e95839230d582c9d9696463
SHA512

b97aa5218de4b6b7b7603631a47531217d16c225738ec156278e14cf78764f611e5735541d96197dc7374808c564bcb62746df2ea900fd59ac654e31204353d3
SSDEEP

24576:FTQnwfwvNPuVeYcuavd1F8LR7kWRj52PS0dYBx1cYXdaZmFqfRNPRISdlZHKohXF:FTQwfA7do0WXFYkIN9dSpdXARyy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff22df967cd0eff3f9b366e6b4c8430a

Files

ff22df967cd0eff3f9b366e6b4c8430a
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ