99a488d532eca43a10d3738556a18ffd | Triage

Sharing

General

Target

99a488d532eca43a10d3738556a18ffd
Size

6.6MB
MD5

99a488d532eca43a10d3738556a18ffd
SHA1

481a20e20aa566703d7c8b64e7864536ae37b0f0
SHA256

644de3a5de2ef66cd455ae70e50fe10ee356e2baa8df88fbb97eb56ea1d1a79c
SHA512

34e84e3e1861a6daf05ff336811848eecf67062ce8a6d397389b836c76b0039c63866d3968d31aa09cc120cc1c00b27b0ca5d5540cf5e690a468239af3efea96
SSDEEP

196608:Afwd5egC59TScKmJCUwYuRyx5ItGTGI8vuVt:zd5edVCeC0uA5IITGQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99a488d532eca43a10d3738556a18ffd

Files

99a488d532eca43a10d3738556a18ffd
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ