977b916b70c7648e0e2afa27b7f68186 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

977b916b70c7648e0e2afa27b7f68186
Size

512KB
MD5

977b916b70c7648e0e2afa27b7f68186
SHA1

ee69299baa6b1aa8b11e5e74343b401154f6d8a7
SHA256

d5768a8a8ed50e21f893d39b55a579a21524d064857e6902d24722367f9fac8e
SHA512

082480d895a535a781988201625b34dfd0b8ff538038778c62c687006077677916f642070ad3b6acd55e162d922ec38cb3edf344cf918115f59300048a0f2b3c
SSDEEP

6144:O0b1bvatxUqhyeDlWgOVSw0l4dLZlrOiwK30aoWkMM9aJ:zb1bvEFwilWgOV+l4dzEm0MTJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
977b916b70c7648e0e2afa27b7f68186

Files

977b916b70c7648e0e2afa27b7f68186
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.wibu
Size: 504KB - Virtual size: 504KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ