PE20240214-20 MULTIFAMILIAR[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PE20240214-20 MULTIFAMILIAR.exe
Size

919KB
MD5

e669676417cc01637b8e79e58e3d82cd
SHA1

9d1161926d57e7ac70df9375a6f3762d377c06d8
SHA256

977330d4bff31775dce9561f7fdf6ac511979c8bb29b5b5daf7a61aed722c967
SHA512

d1627835a566da496f57a30fe7c219cc498d9f9234b36a5262c41518fae7e735e26d83e63ee0f5628d60a3adf198fcc5c09506a947a71ce63798c98c85fbb120
SSDEEP

24576:1m8SmP0Y74MAmKM5WZG8F2uTolFFCUZmvKadA:Fdp74hwvMO18vTA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PE20240214-20 MULTIFAMILIAR.exe

Files

PE20240214-20 MULTIFAMILIAR.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 819KB - Virtual size: 818KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ