59f4db49c3756c538a0e142e9577b497 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59f4db49c3756c538a0e142e9577b497
Size

905KB
MD5

59f4db49c3756c538a0e142e9577b497
SHA1

1e04bb6a66759c7ea51c7116fe4cf5f3a077a588
SHA256

1a6a4164936778e5688f0c028b6d11942f66c83ab737a70dc6bbfd2e35e7e297
SHA512

e615de8a12404b2272cb7fbe6747adb5cca0a8fc74a0f14389c2b1496846ff44626c7b1bd442473f534f17d9806b76e614f1bb9560c586ade4169558185d0043
SSDEEP

12288:YSIt+/xerrmsnUsFIYHqCZnjKFBce/9ghkR6jDzjSbfeXnhLPu2syaUVKnpas:YZD/7nZ7H9njKFBcli67O6XhLjzahpas

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59f4db49c3756c538a0e142e9577b497

Files

59f4db49c3756c538a0e142e9577b497
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 790KB - Virtual size: 789KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ