041187177258defd2cc4f97562656b12 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

041187177258defd2cc4f97562656b12
Size

12.9MB
MD5

041187177258defd2cc4f97562656b12
SHA1

b9a7af646bb4cb0d1749e4c3a473865b78fe9aa1
SHA256

1c3ea8dd27d095265c3112f107d61c66e2de1aed8809679d05ce84c4bf799d2b
SHA512

3d06aaa2733bbcac90d95c6955df1491aadc685c78f7e8ed63bfcb394b7364f0f6695aab31da2fdafe418439d9c9f3e7699d218077dc53b7393ca054fcc66ab1
SSDEEP

49152:u4HHorrEu2pPn+C0M6DaCKCBJP5i4i7xmUyF5oyXmhhvDSO07HZTaip97J9grcax:t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
041187177258defd2cc4f97562656b12

Files

041187177258defd2cc4f97562656b12
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ