2e1899f201562954d5ed15f828bb7d09821df366d8cae1b2158cd75acbbe54fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e1899f201562954d5ed15f828bb7d09821df366d8cae1b2158cd75acbbe54fc
Size

748KB
MD5

43d3267a98f87787945f6309cc8b3d38
SHA1

cfd66cae599170a514d9c9bd55c31a6a484dfb32
SHA256

2e1899f201562954d5ed15f828bb7d09821df366d8cae1b2158cd75acbbe54fc
SHA512

64d662f617a489f40e5adf0e6ba1b9070e599cf0b5faadbdaf4b677e2bfbff2c17e2053e2ce725bcd2c83c0272c910ac12cc93dda2799511fae2c39a4aaaa7ce
SSDEEP

12288:D8S+oGOKcX+Z0BL9bW9ez67AHKOqx1O5UOMFI/e5N/awMRJXvXTr2keOKl:i0BL9iy67MKO4O5UnUeba3Rxrled

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e1899f201562954d5ed15f828bb7d09821df366d8cae1b2158cd75acbbe54fc

Files

2e1899f201562954d5ed15f828bb7d09821df366d8cae1b2158cd75acbbe54fc
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

GbGQ.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 746KB - Virtual size: 745KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ