af20e74271950af0fe647b033efe92ebbbae17505c86aa42b735e50e2b365e14 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af20e74271950af0fe647b033efe92ebbbae17505c86aa42b735e50e2b365e14
Size

613KB
MD5

f5b352ac50dc59ca3e38a7f1a44fcdb8
SHA1

a827959d19ff05f1e212ef9c94e07ce9c6e891d9
SHA256

af20e74271950af0fe647b033efe92ebbbae17505c86aa42b735e50e2b365e14
SHA512

29fb230993f0b51bcc9501bb8310840308b603b5996dbefdccf4abf8d19eb61afea5a47bbc1a4f07d9d0fe39260cffb8f8b39bf955d8882758e0a02784f28059
SSDEEP

12288:NU3YZMrZg17UDBQkwbKCOQOU2ay7MNpJVYXpkZEauAZxmSo:NJ6lMUyk+KU2t7Epg+EAZgSo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af20e74271950af0fe647b033efe92ebbbae17505c86aa42b735e50e2b365e14

Files

af20e74271950af0fe647b033efe92ebbbae17505c86aa42b735e50e2b365e14
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

cbGw.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 610KB - Virtual size: 610KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ