a2494f028d9ce49b765c02980156158f | Triage

Sharing

General

Target

a2494f028d9ce49b765c02980156158f
Size

228KB
MD5

a2494f028d9ce49b765c02980156158f
SHA1

a6b91c7282fbfaae70f10e27217836b82b3dcf0f
SHA256

02e2d2dd526496605da24cae9c21af8f7711241e178eeaac1969bb330c03bab4
SHA512

78a6d8e3836da11b9db5130dcfeb6dd6a4b9f477af56ff5ef62ef3f165947ef0c94ec04ff24f58853ecff86719b8498462e3fd2d49ac69ac381abd39afe28bea
SSDEEP

3072:skiG7i5anod6m30pa1INmPVfYBbv/3M2YrfV4YCbc2AHkAHyg:Xo5anW6m30pa1vPV/hfCF0z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2494f028d9ce49b765c02980156158f

Files

a2494f028d9ce49b765c02980156158f
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 221KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ