b45689d589d6e53943196c4fc67552d465b057d3f76546fb7b11a786e3a388e4 | Triage

Sharing

General

Target

b45689d589d6e53943196c4fc67552d465b057d3f76546fb7b11a786e3a388e4
Size

781KB
MD5

5502b4463a62be41ece9a4557453fd4d
SHA1

34e9658ce06209b3e594163366efdc997ca89b46
SHA256

b45689d589d6e53943196c4fc67552d465b057d3f76546fb7b11a786e3a388e4
SHA512

d2d4189152a58e98e3409f4e23e23bab07ee13116e2d895b9fe4632bb2477018483d35a3df850155d76b0c627d6b49e6e55edf655abc5650611725a4520eef25
SSDEEP

24576:C0Rs+Qv1cttwIFHosVijOXhQbgkqAoGLdP:trosVijgCb0ANd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b45689d589d6e53943196c4fc67552d465b057d3f76546fb7b11a786e3a388e4

Files

b45689d589d6e53943196c4fc67552d465b057d3f76546fb7b11a786e3a388e4
.exe windows:4 windows x64 arch:x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 778KB - Virtual size: 778KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ