1140b72cd5b4b76db0aff82f583a8cddc7173b4e15ea70409b079184bd681abf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1140b72cd5b4b76db0aff82f583a8cddc7173b4e15ea70409b079184bd681abf
Size

635KB
MD5

c44288ffbd25578d2ec84faf385d2a4a
SHA1

17f1368df4efc6536508307fd183a463211672e6
SHA256

1140b72cd5b4b76db0aff82f583a8cddc7173b4e15ea70409b079184bd681abf
SHA512

26c4faf790f0c926ef1c32fe1f60eec3eaa8491c317980c36077f00a4034006a9c7eb9268f4b0c957ae40c0aced184ac3fe05575dd43ee5ee43955b70a484a10
SSDEEP

12288:yyIbuzzyrrJJaKM6ekSBaa00UlSBi2zSTJx1pkDTN4hBIrdQDAOd5:Mqg5XY0LoiKeIDqhqhkd5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1140b72cd5b4b76db0aff82f583a8cddc7173b4e15ea70409b079184bd681abf

Files

1140b72cd5b4b76db0aff82f583a8cddc7173b4e15ea70409b079184bd681abf
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

WTOb.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 633KB - Virtual size: 632KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ