5428e20b5560248b4f0b169bb10ed553 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5428e20b5560248b4f0b169bb10ed553
Size

2.5MB
MD5

5428e20b5560248b4f0b169bb10ed553
SHA1

7149cdd5ab3a19ea7b27fffcc908da8fe65fc84b
SHA256

4b13ef0f31c37c71cac00391e1a3a028d71e77378e83fd3cb03002f39f1ec21b
SHA512

b60c2776986456cb418a435503485897e394f05f3a9dce74d26f5e2d0ad3e7f2249f1bb4c52537ca12938901beb5558bac36719fbb9d8d8693ef59c116cb047d
SSDEEP

24576:t3njXVav9MkURXD4pHg3njXVav9MkURXD4VsZqhae16CGbfxEXYGaKqM+dx5tuld:2v9MN27v9MNxZqhaK6zbfqdluE2Mf7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5428e20b5560248b4f0b169bb10ed553

Files

5428e20b5560248b4f0b169bb10ed553
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ