11901a79cd67a4606bec676c2327acf3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11901a79cd67a4606bec676c2327acf3
Size

9KB
MD5

11901a79cd67a4606bec676c2327acf3
SHA1

0e0cbf8f9e3d30a6055ca4e55a7a17f08ab77c74
SHA256

db6e544c3680647bf2196b0569d12c37462c6fb3755c4c0ef40b3fc7a174fde8
SHA512

aef99b1217675f9fa3dd8ef785f3d5db0cda5805912bea5d75853e2377f1f04f63a5251185efce06edb8db382b5d5529f02d821effa290e7d8e606276c9edbd1
SSDEEP

192:IBksu/zHNQVBeMZZ3v93Vnjdwqz23oU3RPo:3H6BeMBFnhwq6xBP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11901a79cd67a4606bec676c2327acf3

Files

11901a79cd67a4606bec676c2327acf3
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ