1b042e358c2977032fc8fa4e16ac3be5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b042e358c2977032fc8fa4e16ac3be5
Size

4.3MB
MD5

1b042e358c2977032fc8fa4e16ac3be5
SHA1

2f4acd4364c0eca7bd695d27aec733906bb394c5
SHA256

484d672948f3b00fbd56f3600f58ce40e1ee4bf773648a4f85d0869d581dfa1b
SHA512

f2ba4920f59d46aaf381d044b9debaabd778f82ecc9c2101a57c93ffc11ba8786746ebd64989b96bd8ea811ff85aa45ded0064320374821e79fa131be24d7be4
SSDEEP

98304:d31RgyAxuA3vKSHQXpNoAMNVg207mmYiwOBpIeWO:N1RwuA3vKSHQX/oAMHTi1zwO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b042e358c2977032fc8fa4e16ac3be5

Files

1b042e358c2977032fc8fa4e16ac3be5
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ