91086ef2437049d4cfcb66149acf0d95 | Triage

Sharing

General

Target

91086ef2437049d4cfcb66149acf0d95
Size

653KB
MD5

91086ef2437049d4cfcb66149acf0d95
SHA1

ac9cfed7ccfcd8676b437e753abdf7fc06981f71
SHA256

1c5bb8ac1735f400b18f16ed5daab07575ba4aaedb4da31ca5cd89205bb40141
SHA512

effe216b30c6371065d467e585f95db5106c35376a8fe430880a4e965c3a7927fb0453945036b19a6e0e7ec3d4a1290eee6e2445b68cd748086082da29db8046
SSDEEP

12288:bYBbFriWGl7gO03m4sRqJ2IOEEVR/7r+pKnoqsxWbvoyF3db6e0Rqs4J7S:MBxrd4lA7OvR/fqKoqsxsvoyFtbsqsJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
91086ef2437049d4cfcb66149acf0d95

Files

91086ef2437049d4cfcb66149acf0d95
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 650KB - Virtual size: 650KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ