114451414664a0af4b41213713bf3901690e9bba3cb6faf2a392d32402078dfc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

114451414664a0af4b41213713bf3901690e9bba3cb6faf2a392d32402078dfc
Size

4.4MB
MD5

125a2bb8867fa201af39e15fac9a5456
SHA1

143b62749d79555099dd37cad31ecf9266fd99eb
SHA256

114451414664a0af4b41213713bf3901690e9bba3cb6faf2a392d32402078dfc
SHA512

cf8f0f58c285274a43a1f824a6dca42b4bd4084b515c64842ea92f59647d02858cfcbe61acfa9e2b50d0a85dea7cb1e78339e51c7aecd042bf6c74a0f97dee73
SSDEEP

49152:okxLd0tpzOinHK6EKBGG/9BsAYyxVcmtTgd8EOM/OxpbeOJWxeaBTwM0IGcdOJuV:pdwzfq659TxmmtTQ84kpyOJWsDMU+iD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
114451414664a0af4b41213713bf3901690e9bba3cb6faf2a392d32402078dfc

Files

114451414664a0af4b41213713bf3901690e9bba3cb6faf2a392d32402078dfc
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ