2f9616669792dd55b1f74103a50390e14fc15f77d069749b09af56c1f700fb2a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f9616669792dd55b1f74103a50390e14fc15f77d069749b09af56c1f700fb2a
Size

781KB
MD5

b872ffa52e5e1fe9023a681542dfe4f1
SHA1

a3dbe4fc0b796c5f53d01aff4a502665dfcb0478
SHA256

2f9616669792dd55b1f74103a50390e14fc15f77d069749b09af56c1f700fb2a
SHA512

3376454fc20f55f55339fae4c7531ca9340c88088d17483a5543c3c8908532209c2a16e53074518232185862152ac09c398b01ccb4ae0425ed143882da9e829e
SSDEEP

12288:MoT14b06a+GvveMTjiqpAL1HMoP2BjQsknzJLLsx:MoJ5+GvveMTNpiMoP2BjQskn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f9616669792dd55b1f74103a50390e14fc15f77d069749b09af56c1f700fb2a

Files

2f9616669792dd55b1f74103a50390e14fc15f77d069749b09af56c1f700fb2a
.exe windows:4 windows x64 arch:x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 778KB - Virtual size: 778KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ