Nicht bestätigt 210199[.]crdownload | Triage

Sharing

General

Target

Nicht bestätigt 210199.crdownload
Size

46KB
MD5

dcb1c575282affca598b3aded73dacf3
SHA1

8d4e7ba0f6a597bd590d839722fe0659abb96e1f
SHA256

6d2877574bd3069f85d3ae4bb3a68009ec10d8bf54579ff4be0ab5fce795f5f3
SHA512

6dd584faa9503ee848e62b15b22dc3f06f645a5ac1245fe35e3bdfca389e4d844b3fe99bd8bb7625337636efc7a5641dc0eaf7cc045d69c017a592698fba7dc2
SSDEEP

768:rDDNW5bFR8ddbmK0hshxUIvXbcjl8I6eyaAD8VXo3HwhF:PDNW5bFR8dlmKI5obyl8I6etAwVY3Hw7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Nicht bestätigt 210199.crdownload

Files

Nicht bestätigt 210199.crdownload
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ