b79fbf5e931d1e0cd4cc72f7a8662694 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b79fbf5e931d1e0cd4cc72f7a8662694
Size

970KB
MD5

b79fbf5e931d1e0cd4cc72f7a8662694
SHA1

49eb5908db1c17a9d4d5f81a7e0b155f8eb673db
SHA256

2a97913f1069b7fefc0713a5237dd6465e6b62f5439d830258cec024c56a7a46
SHA512

224e68d3d9e31a4ef0df1ef0fc17a0332284eb8f0fc4f2c3d053a06f9e1f3febcc4535dac30383b984a801b148c12bbbc333d457d32adf1b58b7baf12c148c59
SSDEEP

24576:iQ9jRUtMHnE2qNL3kUzdcPBqM12YoynSrr3wmq1sK:Nfc8nEFNL3bzaB912bySP3Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b79fbf5e931d1e0cd4cc72f7a8662694

Files

b79fbf5e931d1e0cd4cc72f7a8662694
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 860KB - Virtual size: 859KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ