450b5c2dc3592c43baa4f81e7c70c353 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

450b5c2dc3592c43baa4f81e7c70c353
Size

1.8MB
MD5

450b5c2dc3592c43baa4f81e7c70c353
SHA1

03ab7a1e0e49ac538334cfd171842e3d643d6715
SHA256

0b3a2e96fb4a23fdf60ffe8de6a954e9d6fce722772ae0ca21c72f1ab9f06130
SHA512

2d708f706636755bcea5a3152c2c53230b35da4cdcbd8d1eeb545044f256167759da4f8ee689940c9102935b86f9505aafff692bdbb82593f66752f340d58498
SSDEEP

49152:tdU77xNZUmQ0GoOsGFJP/3dx/kkvRhyxc1wa:tdU77i4OsYWANGa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ematrixsoft_javascriptpro.exe

Files

450b5c2dc3592c43baa4f81e7c70c353
.zip
ematrixsoft_javascriptpro.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ