aaf0d50959980eff3e49bc94c3048f84 | Triage

Sharing

General

Target

aaf0d50959980eff3e49bc94c3048f84
Size

1.2MB
MD5

aaf0d50959980eff3e49bc94c3048f84
SHA1

8c6e5691078b7bcbc8c39511a48a313a1e5bcac8
SHA256

f5d2a49f8800562ae2edb68fb838b64196844c2425fea90663baf4f7d7776f81
SHA512

0aee7d16bb9a75b303bf520d6abb62311f4a24b0d06b263ee9dc81a2bf3c166b8c186e2203ae7ba3a528bfc0e9a042b41b96326c55b97d044814c2e37f4bd190
SSDEEP

12288:xWnS2djg2Vr7QeFIsAjucAnJXqmjtirGi4tn/vJgs0wN1+dHNR0+75U7+F+IVc:8So59c0Jamj2GjtnLwm+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aaf0d50959980eff3e49bc94c3048f84

Files

aaf0d50959980eff3e49bc94c3048f84
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ