191cd9d202c18de6c35f00d92f7fd671 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

191cd9d202c18de6c35f00d92f7fd671
Size

978KB
MD5

191cd9d202c18de6c35f00d92f7fd671
SHA1

cf2939a28aa4262fdf7b6829bd3e588235168ad1
SHA256

90e8ac89e307405a8bfe4a9a9828ab034d1ec2a90275d85f1008b091abe5c7e1
SHA512

1cd1b31eab13204d4a8037bc01126b5192b4ba5898868d160bf78b98946fb597765d0aa4a184b3f9b96d663a9f202d240227a17358eb9b8b2d9ca972aea6cab3
SSDEEP

12288:CcAtAOYhIASvNJoa9Dc9F3nC0Py3gAhZIWygFP2um5GVGAo2Yc3MMr69dtPR7Yqh:Cc/8JbyAFPfxZ+Fj0DrnA9rkt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
191cd9d202c18de6c35f00d92f7fd671

Files

191cd9d202c18de6c35f00d92f7fd671
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 975KB - Virtual size: 975KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ