2b971fbbe90c59fdede1a45c284780a70fc7d42fcb9a09147caa2e4b98163c9e | Triage

Sharing

General

Target

2b971fbbe90c59fdede1a45c284780a70fc7d42fcb9a09147caa2e4b98163c9e
Size

209KB
MD5

04ffbf7e5e2712c806cd1438255ece99
SHA1

a890fd392e5fe34b36377b8953fe0b7dc67987ba
SHA256

2b971fbbe90c59fdede1a45c284780a70fc7d42fcb9a09147caa2e4b98163c9e
SHA512

3a97d2cd9d5b9095f30e87e0c273f9f937c4cb7c05363b2ec75b2ca75da96ff1d757e2f70e0e1628e0c54610a1bb4b6b05ea6dc5ffd5a4c7780b8a18c2d3a711
SSDEEP

6144:8BM4OuqkmO1GsJR15u7j4tLCCOHaNjiiqq:8qXOMs/OC6HaNE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b971fbbe90c59fdede1a45c284780a70fc7d42fcb9a09147caa2e4b98163c9e

Files

2b971fbbe90c59fdede1a45c284780a70fc7d42fcb9a09147caa2e4b98163c9e
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 354B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ