4b98186f2687f6909709b6bc6d2d0a458792450d5344e89d2a24f9344a31126b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b98186f2687f6909709b6bc6d2d0a458792450d5344e89d2a24f9344a31126b
Size

630KB
MD5

ed67695e4cbea980f0e5f6301185c235
SHA1

e83a8c05016807e1a1d905a99a5938296ef4180b
SHA256

4b98186f2687f6909709b6bc6d2d0a458792450d5344e89d2a24f9344a31126b
SHA512

e2048a647f766fca4e40c0f42d07dba722e035765a12595c724b6364e358f407e342e7d800be634a79e271c64c60a09f87f1d42328bafb2885fa173220cc27ca
SSDEEP

12288:UNqBU3YMqrbURxyYJycr6jis3c895T1UPhagVn0uzWOTIZ49uC5ApTB75ckf5k:JBJVqFrAiss2TUp3VnhS4IZ44XPek

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b98186f2687f6909709b6bc6d2d0a458792450d5344e89d2a24f9344a31126b

Files

4b98186f2687f6909709b6bc6d2d0a458792450d5344e89d2a24f9344a31126b
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ECUm.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 627KB - Virtual size: 627KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ