2005e29fcb8633c788348e547add6994 | Triage

Sharing

General

Target

2005e29fcb8633c788348e547add6994
Size

8KB
MD5

2005e29fcb8633c788348e547add6994
SHA1

dad5940bd32135275e3c1d42dfe77a8916de3c1e
SHA256

13c0058ce24709a0dcfca3a48b4eb4a5c8ba33b278014d1497ab03c8e8fd399d
SHA512

87b35ab811e679ccffbdb0a2f494d83babcaa33868056fbcf0e0fdd2d2643c5774326f7a3ac4aba80384ee9300d95f23f1985eb7ca3086fdfd8a3f453163d646
SSDEEP

192:pLAuHZkpTlrCVEnlYJL/zLTx73rEu2qg8UYE:pLAuHZw1CPDzLTNphk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2005e29fcb8633c788348e547add6994

Files

2005e29fcb8633c788348e547add6994
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ