291a5e46dec9ab8614287e4900b9b43a871f4e4d536700c78e5f0af37a70f130 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

291a5e46dec9ab8614287e4900b9b43a871f4e4d536700c78e5f0af37a70f130
Size

792KB
MD5

3b0ead8beae86114dd1f3369bab4e67b
SHA1

d3ed18b5cde8d2f39fdf7b199c59183d13ae19a5
SHA256

291a5e46dec9ab8614287e4900b9b43a871f4e4d536700c78e5f0af37a70f130
SHA512

a17fe0e511b8dd986e605478cc93cf23f0ce470389ecd13035b733ef632b5672c68b761390897174bcb034b7dd74f4e7501789fc6fcb7387e2878ccc1683e7b4
SSDEEP

12288:Jr1ScVYx6xMQ3DIiTSonRMeZyN8WcbFbP9Hb26YCD4ezIhMF2VKaBqvKuL:bSOq6uKUiTunGWajq6pXzIhxKaa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
291a5e46dec9ab8614287e4900b9b43a871f4e4d536700c78e5f0af37a70f130

Files

291a5e46dec9ab8614287e4900b9b43a871f4e4d536700c78e5f0af37a70f130
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

DQyg.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 790KB - Virtual size: 789KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ