ab3aad0b6a8a4660029ddf0c83c39e50a67a51a8d1066f8dbdd3e0c992f02cea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab3aad0b6a8a4660029ddf0c83c39e50a67a51a8d1066f8dbdd3e0c992f02cea
Size

115KB
MD5

68bf72a35ef3c7eaaaaa8992b67edb37
SHA1

718d83d13286e103d1e9d4ccc23b0f0c3db349d5
SHA256

ab3aad0b6a8a4660029ddf0c83c39e50a67a51a8d1066f8dbdd3e0c992f02cea
SHA512

833c08b13cf75c60d4f746f6f15c2fd9ac0014bd7d4ba5bb19634494208248bbc39999ca427e59c302a52b6b2f8e6ba3cfcb4c899e76f6d6ac3f04eb53693d14
SSDEEP

1536:JNj+sNQJIhSd6mZn4sYkYNITAVGh8YScpbTM3CEF/7GmqbMY7usiY9hkD:jcGM6mZ45kceQGkx7GmCMY7pdkD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab3aad0b6a8a4660029ddf0c83c39e50a67a51a8d1066f8dbdd3e0c992f02cea

Files

ab3aad0b6a8a4660029ddf0c83c39e50a67a51a8d1066f8dbdd3e0c992f02cea
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

MNjJn887.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 354B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ