aa1d1b6f0663f27a22692428846a2630 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa1d1b6f0663f27a22692428846a2630
Size

1.9MB
MD5

aa1d1b6f0663f27a22692428846a2630
SHA1

2a9905371d982ecad8d8396cafea3bef4a7f0162
SHA256

7e336ecd7609e48e582170ca8d7e3ee644fa29064c47cb836d24670a755aa42e
SHA512

615d4cf4fd8b1ed1ff411d9a5ace4852c79b27d0fc621c4443318553227b6ab6064f54d7193371166b5d521f8376ff848d94c7dcfc3b635ae8ec8c1c4db848b5
SSDEEP

49152:UTrOV1i1gbnZr3kl9oSx4A9ZpsA2HgAL5L88:UTrB1sUl9NaA912LLf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa1d1b6f0663f27a22692428846a2630

Files

aa1d1b6f0663f27a22692428846a2630
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.gGv0
Size: - Virtual size: 432KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.gGv1
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ