0x000300000002a79e-79[.]exe | Triage

Sharing

General

Target

0x000300000002a79e-79.exe
Size

53KB
MD5

36427b95bf89d2a744436613fdd78d90
SHA1

5cfa33192dd50cbedfd84595d45591cdeb1a9bd1
SHA256

53e97141c0e4bdbf1b3856ffb8de80b7e6b3e7e7177ce4adee2d56dda70c339e
SHA512

453105e0e2d2ede54072da2be22e86c34c412c2c004b8ccfc13716dd6eeca1777c1d4aab032240205eb1fdbf5e3af1dafb62488ec1f5d376ef8619d5d0486e8c
SSDEEP

1536:7sHtR94yHspDM7K8xdQNqH7knIHHsV+eD1G3wVcl:7sHtR3CDMW8QcpHHsV+eD1G3qY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0x000300000002a79e-79.exe

Files

0x000300000002a79e-79.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

J}!+4!
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ