5140a2cf5d5f0b17e3df16c6a2699c44 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5140a2cf5d5f0b17e3df16c6a2699c44
Size

650KB
MD5

5140a2cf5d5f0b17e3df16c6a2699c44
SHA1

bb52a899e51c30e86fa14a2d65a96daa22d6e4c2
SHA256

2241b9e1db48e69321c59327eca50dfc2025bc97f03bd9f3cc84cb4834407455
SHA512

bf32d69e2f95261c3fc858c873b9729ed74f40db415d1db08b4e85be4aaed129b7fc53abcfb8ad4b0ba207f5d7e40e9d581a7659121a03469d3b43b57d0dd0f0
SSDEEP

12288:JpudSAmZHt9ukzpRNbpfrx2jQc1j9Iu+GMBXSRFOpJE7iY3zz:JpKm95pRNtwjXZIuccFOpJELjz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5140a2cf5d5f0b17e3df16c6a2699c44

Files

5140a2cf5d5f0b17e3df16c6a2699c44
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 529KB - Virtual size: 528KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ