390c442e3cbb246244630feab32d3683a8fe40a9b84bf1f1c159861797c2f55e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

390c442e3cbb246244630feab32d3683a8fe40a9b84bf1f1c159861797c2f55e
Size

742KB
MD5

f386005dc65297c732019e57ba4e5886
SHA1

5a395231e41a9d67ec7650f3edcae13dd5ebedeb
SHA256

390c442e3cbb246244630feab32d3683a8fe40a9b84bf1f1c159861797c2f55e
SHA512

f643c9aa50a57334b928923e9aa84d06cfeaa60d5958c62daa5b07b7827ca8c42eb3f555d0d2d209f6cddf9d3407c956ca89093643401d66e8786d2a15174f66
SSDEEP

12288:r+Q2t+nXg9h4UtDbqdEsNioU678tr/0uz4hO19dg2Ha5QHaPtDi4Cku:aSQ9dZudZN4qarUydyFtDi4d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Uouzkcgp.exe

Files

390c442e3cbb246244630feab32d3683a8fe40a9b84bf1f1c159861797c2f55e
.iso
out.iso
.iso
Uouzkcgp.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 688KB - Virtual size: 687KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ