5a59849401e1622969b5bb57f65ea120 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a59849401e1622969b5bb57f65ea120
Size

1.3MB
MD5

5a59849401e1622969b5bb57f65ea120
SHA1

6b1c32dc6fda1e76e1b0c483bb86b1eeb86de59d
SHA256

ac1796ad167cad9abb82639874e80a7c549f4df243460fe266874a4f552d3c6e
SHA512

1ecf941692c7ed2c8f955bee2fda312213520f63de36b025d04327be199f2a89e246599d223f51980b5869f073000ec12566d21a8b0d02bc030f2c0e3c80184c
SSDEEP

24576:XtpHnYwaqoq7iTlT5DSyWKGTwU06XeAkQl/jwyJs3YX6M5yhzPrBFva:X7YwaqooiTlT5DSjKkwJlAkg/j9Jweyp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a59849401e1622969b5bb57f65ea120

Files

5a59849401e1622969b5bb57f65ea120
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 984KB - Virtual size: 983KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 321KB - Virtual size: 321KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ