5941021a15fef57fb2a120e50d6897abb16958b5c1ef521bfbdf5b6f19d1b77f | Triage

Sharing

General

Target

5941021a15fef57fb2a120e50d6897abb16958b5c1ef521bfbdf5b6f19d1b77f
Size

111KB
MD5

ad9ae1e496b3cd3ef413dbf244bfe3e0
SHA1

37381bceb92e1227be1047e64a110413b9842f43
SHA256

5941021a15fef57fb2a120e50d6897abb16958b5c1ef521bfbdf5b6f19d1b77f
SHA512

3642181438fccf4dc4a9e6827c30e6ced4b13c01fc57ec49ce7187f0513e8eabd4be8e919a86d31bec99933d0bd56eb8ea7639e96218e42e569793e339a6d499
SSDEEP

1536:g9hnuyfgq35H+YE/f6Xey0vAoUociYYYAsjiVLK4YYYYYM:IHCvXUoc4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5941021a15fef57fb2a120e50d6897abb16958b5c1ef521bfbdf5b6f19d1b77f

Files

5941021a15fef57fb2a120e50d6897abb16958b5c1ef521bfbdf5b6f19d1b77f
.exe windows:6 windows x64 arch:x64

fd28b58ed950732421f7f0903a7f8b96

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

armourycrate

RHBinder__ShimExeMain

Sections

.rdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ