b5f895952ccae6422f2d7a6ff9b9066250de63b3b2cec3cd238b895cf1cf532e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5f895952ccae6422f2d7a6ff9b9066250de63b3b2cec3cd238b895cf1cf532e
Size

758KB
MD5

51eac88efa3e1102fd58c720adc71983
SHA1

381342bc3aed3de3c653bd0992a75a4309f0d1c1
SHA256

b5f895952ccae6422f2d7a6ff9b9066250de63b3b2cec3cd238b895cf1cf532e
SHA512

69afddca65c159b8a2daf616a8d4a8801adf440774021a2b67e8682c9d70625bd45aa9f9cd00a2172fdf65a6ad0489e4e91678408e7ea85fc75f3029ccea0600
SSDEEP

12288:ERQq/mLJZm3WFlWiquHaggFBQ1IkltBJhlVm4zhG1GLfhxHxyrftfmrtVJmRhbIY:ERQtZm3WWiiHF2rBJhLmi8GhStOrt6ha

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5f895952ccae6422f2d7a6ff9b9066250de63b3b2cec3cd238b895cf1cf532e

Files

b5f895952ccae6422f2d7a6ff9b9066250de63b3b2cec3cd238b895cf1cf532e
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

OnKH.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 756KB - Virtual size: 755KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ