401f56e4dc287be5c0062003c2cbfbb8 | Triage

Sharing

General

Target

401f56e4dc287be5c0062003c2cbfbb8
Size

2.6MB
MD5

401f56e4dc287be5c0062003c2cbfbb8
SHA1

62cb6ed8be5b0d430f03894c327929c96e757036
SHA256

f706f951577a07eb431f9bf5333a6563a699ffbcd914b7d4fecafbe9c5c1ea6f
SHA512

a1a7e9845a6a7a84139071d7b2165093884c7b5422c9b61fd20b4d1aa37c64c09d3836cff6dc240cdbb233bd2c726949e86931982f97b2c8a72dee5d2e1dc710
SSDEEP

49152:wBKfE2yaLt9SSasY6DwOBfrnvV7UeWtljFzqKOKmhpZ:wBKc2yALXYiwOBpIeWXFihpZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
401f56e4dc287be5c0062003c2cbfbb8

Files

401f56e4dc287be5c0062003c2cbfbb8
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 140KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ