5494ce0b1a097bb8e0248e6b15e6aaf9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5494ce0b1a097bb8e0248e6b15e6aaf9
Size

209KB
MD5

5494ce0b1a097bb8e0248e6b15e6aaf9
SHA1

2801984cfc112e7280af4f13b2ab15bfaed8ec2e
SHA256

1193fc9dffe2058bebe836688ec65a3ae81344f7dadef7abef756642000ec356
SHA512

cee6a48201b136768d8e97e5d273474ae80d21869bec2b1a353eda726361c36f7255b9c54038c15947d6ca335d1733fe93eb11cfad751e82f885a1b5c1338997
SSDEEP

3072:Y/jsQtvspHp/vfLMYHyAqf24apHPxfVW66rH/3XjSYyHbrdrIXjdZGV:YbsQtUJnjMYHQa3yHvCqXjdZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5494ce0b1a097bb8e0248e6b15e6aaf9

Files

5494ce0b1a097bb8e0248e6b15e6aaf9
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ