026e645bd01c835490b922a7f8db6d7a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

026e645bd01c835490b922a7f8db6d7a
Size

54KB
MD5

026e645bd01c835490b922a7f8db6d7a
SHA1

811770794127929a4a1eb9e58a49ef884b3c5089
SHA256

b4ddf9cb917b1eef02f43a6eb416d10fff41da3234ed28d5c69a982325ca0e05
SHA512

bf02e81254eb3427aeeb1332c408ea09ad254be7f376eeeda4bf8c0e8899120eda7bb419aec43b9e554b04461d9d2f9b7dc2cce8f9c134d0060de66b432c598d
SSDEEP

1536:DuXP24gDL4efYaBVQ1IL82OaAKQ/9tzwVcl:DuXP24gD5fO1IBOaA9/9tzqY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
026e645bd01c835490b922a7f8db6d7a

Files

026e645bd01c835490b922a7f8db6d7a
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ