31ec067b11cf449483e534c920020f999480717931d9dee2ab6af7e77480f642 | Triage

Sharing

General

Target

31ec067b11cf449483e534c920020f999480717931d9dee2ab6af7e77480f642
Size

712KB
MD5

8c675bf23f3b3285821c8cc03b88970c
SHA1

6f278994c0db1346866e1c38d787ef4b8f819076
SHA256

31ec067b11cf449483e534c920020f999480717931d9dee2ab6af7e77480f642
SHA512

c9631136632845f14f6ef45493e3bbff276a14e406009d0ceda358c1dfc692515c4820a62551392a75df857a39653edacb65f70d3fc123d4ec5f8a39c681f993
SSDEEP

12288:Q/ZYYUypxtczIj+jjSDSEBF49uur8D0G9A5oRLOKJOVyx2E8B0R0MuC2iNHg:IKYUypxtajWOEz4ouU5V9/cyoELOMuCr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31ec067b11cf449483e534c920020f999480717931d9dee2ab6af7e77480f642

Files

31ec067b11cf449483e534c920020f999480717931d9dee2ab6af7e77480f642
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

nKwB.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 705KB - Virtual size: 705KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ