35444e0b69369eabf056fa55448e578e28023cc5a10bf0e9d298fc49c7cc872d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35444e0b69369eabf056fa55448e578e28023cc5a10bf0e9d298fc49c7cc872d
Size

785KB
MD5

113ca7f7d29a1cafb19dea25abfb3f85
SHA1

2d36acde81ba16fe6274c3e5ac175efed08a08b8
SHA256

35444e0b69369eabf056fa55448e578e28023cc5a10bf0e9d298fc49c7cc872d
SHA512

8178a3219f08721da9cd0f6201626bae097932170a89ee340be9a67798c5e2f683adb5343f1029293b9837dec1b2b8ca7a4f525fe46975041e48809ee9f0d5d4
SSDEEP

12288:DBmSZ7vI3YhO2r+YvTe9cmqe1zsAhiQi9E7agMCAqU4EaEfo68j8qshDL0:tFI3Mdv+q2wiiW5s4Mfo68bshH0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35444e0b69369eabf056fa55448e578e28023cc5a10bf0e9d298fc49c7cc872d

Files

35444e0b69369eabf056fa55448e578e28023cc5a10bf0e9d298fc49c7cc872d
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

OWJH.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 783KB - Virtual size: 782KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ