798b77be6686e9e9c2e74874a1bf7aa2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

798b77be6686e9e9c2e74874a1bf7aa2
Size

13.1MB
MD5

798b77be6686e9e9c2e74874a1bf7aa2
SHA1

9d54cf7e1428af895e605c68d2fd01cb52b560c9
SHA256

6f66ca29ec9d5bb8214fe664208e0ee01c3df2daa255a76314c0ef239b21ea27
SHA512

8069ba499f053bfaad00e5e54880fe3a3b0bc0c0099034379d00b80fed170ea0657d436ff2c40eabd9bc4587d2056fec85432f74473de0008d41de31f6dbb523
SSDEEP

196608:6NL6TmekewfU1EaoMKtJg4tERZ6EXDrtwaXpoHXRkI9eNC4asTNJyeethpd2tZ0Z:6MTeUyMKjfWRdDRRZqmSeNOhr2/0XaA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
798b77be6686e9e9c2e74874a1bf7aa2

Files

798b77be6686e9e9c2e74874a1bf7aa2
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

DMU and DAM Unlocker.pdb

Imports

mscoree

_CorExeMain

Sections

d@!@K
Size: 13.0MB - Virtual size: 13.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ