f8a8e269bc227acaff719b4b5f0ee9b8da59d0916e665e801c8667fb0986a646 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f8a8e269bc227acaff719b4b5f0ee9b8da59d0916e665e801c8667fb0986a646
Size

1.0MB
MD5

6425d2ded0110a8f410a3dcbc242ad2d
SHA1

d6445b4758efdd7ea7c9a3ba7313d58db1fd369c
SHA256

f8a8e269bc227acaff719b4b5f0ee9b8da59d0916e665e801c8667fb0986a646
SHA512

3e92a496e8fc81626170f8359b2d3c1e6e0e244900a57feb1659260e411518753c4632267f8516f75cb13a032efaf68449a573efba574b7f36cc5c4cd802dbe8
SSDEEP

24576:hAwzhTtPSfzsQPp4IUYox/raRoz4rH1il:hAOTtPSfzsM/ZogRk6HAl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8a8e269bc227acaff719b4b5f0ee9b8da59d0916e665e801c8667fb0986a646

Files

f8a8e269bc227acaff719b4b5f0ee9b8da59d0916e665e801c8667fb0986a646
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

MKiJiu.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1019KB - Virtual size: 1019KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ