004e1d35a2639240e31ca6e7209c785b3976a35f4fa595759cdccc9e6b7127eb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

004e1d35a2639240e31ca6e7209c785b3976a35f4fa595759cdccc9e6b7127eb
Size

11KB
MD5

3d9613746701cf6a94e7c9315646430a
SHA1

3f4410732be3e0b58c6d9ca91f42507c95f27f32
SHA256

004e1d35a2639240e31ca6e7209c785b3976a35f4fa595759cdccc9e6b7127eb
SHA512

137b1e30684e3ad0cf88c966690a80e09bd14e05aa790cc4c1c25527746ae1936207b55e8574fd2ae1346dd89c49563488ffbadcbdcb6824085946c66bc37e84
SSDEEP

192:yaMHN6d6f3+EMSHqbXucnU8rLaEvNLb/VDMbAPUo7VpLhlN/:yC6f3+EbSDU8xNLb/VDMbd6VB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
004e1d35a2639240e31ca6e7209c785b3976a35f4fa595759cdccc9e6b7127eb

Files

004e1d35a2639240e31ca6e7209c785b3976a35f4fa595759cdccc9e6b7127eb
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ