b4b1830287699c908abf8ea8a89d967e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4b1830287699c908abf8ea8a89d967e
Size

166KB
MD5

b4b1830287699c908abf8ea8a89d967e
SHA1

57733e387a462cf0625ab19dc6f9ff582c23420e
SHA256

93776ecc43bb7bac36027fbe995014d5fb0aaf8f356f35e4c1630b5cda6c034a
SHA512

74fa37dba5d34bfc83dc68ae563d45f6aec9fcc8b403a90f92e22450da77c8fc2159f1ce86cded2d0307b91f08e36021c57c1a1fe9348d367231506b3bab7c73
SSDEEP

3072:vE1s+Y5Sc7bYxR5TI1I7VufGYuv0o/MlQDE1tdWrRCfwSED40mj/TD6nQ6:8sac7bUR5TI1I7s+YK0o/vDEBWrRCfwj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4b1830287699c908abf8ea8a89d967e

Files

b4b1830287699c908abf8ea8a89d967e
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\users\mz052\documents\visual studio 2012\Projects\WindowsApplication1\WindowsApplication1\obj\Debug\ali.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ