b3fcdebb2de63cc893b179f03431076b2aa66f62d70d3070275f6a2da926947e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3fcdebb2de63cc893b179f03431076b2aa66f62d70d3070275f6a2da926947e
Size

1.9MB
MD5

87065c77d9e06257d8056d1bea5aedda
SHA1

4565b28b475867e78fdb89ba294721dd2e396bcc
SHA256

b3fcdebb2de63cc893b179f03431076b2aa66f62d70d3070275f6a2da926947e
SHA512

76f403fe84284e774f51e0cde22ec32b0a255ed50727dca7b28427577b9f98dc91cd32f59df2452c13a46513521a252e44444c93cb999c5a9e22198db033a3c2
SSDEEP

49152:mKc2zCA7MpCILfLv9IvDLLjScpzOeBLJoCTJD:mWCA7MhLz9IfL9pzOeBWCND

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NatTypeTester.exe

Files

b3fcdebb2de63cc893b179f03431076b2aa66f62d70d3070275f6a2da926947e
.zip
NatTypeTester.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ