76da6ce9b00d783c069290e189af3b9b7c67165cdd17a0d64f9bc33e37657844 | Triage

Sharing

General

Target

76da6ce9b00d783c069290e189af3b9b7c67165cdd17a0d64f9bc33e37657844
Size

720KB
MD5

8cf1b8f56837b3101b8ce850d00d8fee
SHA1

afb1d49b92bc93b893c9c6e80eb3a62c3e46b2ae
SHA256

76da6ce9b00d783c069290e189af3b9b7c67165cdd17a0d64f9bc33e37657844
SHA512

b3a955de65809f7f8626ceb19c7a9d0599704372b79406f4d7b29e99b7420963034b799adda8b25668ab61195737d6a33ab21b08178d9f6599631d41dbe86739
SSDEEP

12288:2XD8/0ExKjx26VIFKJ8NObVWjaSpfi5oojbGMJaQwmAuxPHHzYXeYRSpvS0zHLJ:o/3aabkjaUfQYQDHxVvHL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76da6ce9b00d783c069290e189af3b9b7c67165cdd17a0d64f9bc33e37657844

Files

76da6ce9b00d783c069290e189af3b9b7c67165cdd17a0d64f9bc33e37657844
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

bwrv.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 703KB - Virtual size: 703KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ