068bba2014207f6227cfc626062145c2 | Triage

Sharing

General

Target

068bba2014207f6227cfc626062145c2
Size

21KB
MD5

068bba2014207f6227cfc626062145c2
SHA1

64baff3a070f80d54255ee318978fb3cb77bdd11
SHA256

9fd881fb5242a5cfd8295eaa4900d4295c80ce7dae84d5fd79636c5502f43951
SHA512

519c573c058fe3e4b636bf60a113bd2132149684aafc85362f62969c8c6ec5c3137b58a87ec60310f753ba040dbf22477faeb113155834995067644fa008ea00
SSDEEP

384:8RYhuY/Sd6OBLakvwKwq6uw3lXk/b1aTm3lXk/b1aHWbkzYcE+8G8PZ:0t6h1Xk/4q1Xk/4HIwYcE+85

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
068bba2014207f6227cfc626062145c2

Files

068bba2014207f6227cfc626062145c2
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ