99a4821ee4a5cc3892355b8d1225ed7f | Triage

Sharing

General

Target

99a4821ee4a5cc3892355b8d1225ed7f
Size

249KB
MD5

99a4821ee4a5cc3892355b8d1225ed7f
SHA1

0b3d4f0022c7979a5c7a3d73bdc5bd33e12cd209
SHA256

0ee20b2acfcb3b12b9bd00534417a056ceb6c4ec1f754ab4ad718b200db7d76f
SHA512

3962d9edd55fbfc07befac8104745d76c7156d2c73eecd4023761ee6610ac1a4424c8882f71e191d136267926bb4c6cce2ccd32c578739bb0916c95a8e4efd3c
SSDEEP

6144:9xRy5EPEahzwf0gYR5z7eLr4CU0/DN479Y69ZJaIdf2cBN:9xRQf0gipkr4C/Z4pY+aIdf2cBN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

99a4821ee4a5cc3892355b8d1225ed7f

Files

99a4821ee4a5cc3892355b8d1225ed7f
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.ro
Size: 246KB - Virtual size: 246KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gl
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ