5688be044abc122322fe456f9b9f4557 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5688be044abc122322fe456f9b9f4557
Size

2.9MB
MD5

5688be044abc122322fe456f9b9f4557
SHA1

3bd25c8a6236555eac3b01dfcb981170df0216a0
SHA256

6628f30ef9203b5f2265cf1b8ae382d0d6a234b34f9c39e7090aff7b1d071c83
SHA512

cd6a793d71d34a3883fa40235120743a93fee9f5b67f4a6599a6e0682c1613f5b2ac521b2ce129f86541df5886e203d8652109442b4ed5e0fef844a7eae89fd7
SSDEEP

49152:1smhnqAs9pJc0dnKh+Q0N1rs+vIUSg+6+8ohnRh1Na1OKM6nYAKhFQpSH3Oh5gxz:jqXpy05Q0N1rsYSZ6BoXh1kkypSH3Oha

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5688be044abc122322fe456f9b9f4557

Files

5688be044abc122322fe456f9b9f4557
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

27=H!U3
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ