131b171259e49f76d2de9042707b55c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

131b171259e49f76d2de9042707b55c5
Size

51KB
MD5

131b171259e49f76d2de9042707b55c5
SHA1

99fcd3adad24382bdba57473d32c21944011440d
SHA256

95185c5f5225ae3d4bdc2f1aedc0d79d0804edc1314ffaa826eadd6b4f1f5df8
SHA512

bb1fe107d911de4837481f669ca212a96cd5de15d590cb41841c6cde9cfb3d27a0b1c9f8c14757d64401e386ac39b7387760a7dc52752114787065b2755ba60c
SSDEEP

768:HPTfahncy13TCIlc0WF7wPrai/pzfFMvpEpoet+l0SrkRPDe5UI2+xkbkqRnxm:ri+PmecThTFRpjE0wkRPDe5m+SHxm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
131b171259e49f76d2de9042707b55c5

Files

131b171259e49f76d2de9042707b55c5
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ