969560afed10b3bbfc5b35af78a0abc3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

969560afed10b3bbfc5b35af78a0abc3
Size

14KB
MD5

969560afed10b3bbfc5b35af78a0abc3
SHA1

6876f84608e1f5f16aab8bf98f1eeda56515823c
SHA256

c57f75a4f927fd1174e4a6be1d6e5f1b37d40e4e03a1aff695c4d29d6c7e5def
SHA512

b61f7ade539f84c8306858ea14fda7f9bab4776fc3c72059b70e10ef777787ac85d2623daddbf130bff472554db73d77b690d967a4b2b0d25365ebe5f344d8a8
SSDEEP

384:Aucg0PhKwzuRwW78BgGsWme7cVzHzg3cw:ihLewW78uWmeQVza/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/nalog-ul_setup.exe.exe

Files

969560afed10b3bbfc5b35af78a0abc3
.zip
nalog-ul_setup.exe.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

A:\botnet\PartnerLoader\PartnerLoader\obj\Release\PartnerLoader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ