979c3af589a4da4db0693e0fed8d6c76 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

979c3af589a4da4db0693e0fed8d6c76
Size

78KB
MD5

979c3af589a4da4db0693e0fed8d6c76
SHA1

220119f7ff3e20c4b48f91901a1540cdabe56e1b
SHA256

0e48dca24a7ccab48c5e5a1dd1428d0176ef0952b47670975833ccf5c69c7d41
SHA512

3127da4998eac5996262f8de335a5822ee8354a67d6bc8528253fc268d4176cf73bb1dc223cee45b24ffdc018912e0d5e6df7608868e526431495a0323f188b0
SSDEEP

1536:AhSV5rXT0XRhyRjVf3znOJTv3lcUK/+dWzCP7oYTcSQt96t9/E1ZP:8SV5rSyRxvY3md+dWWZyi9/w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
979c3af589a4da4db0693e0fed8d6c76

Files

979c3af589a4da4db0693e0fed8d6c76
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ