1028a0540e49d2e24ca9ac57d62ae597685f0cd52dcc65d6e4cd6068c6fa8b32 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1028a0540e49d2e24ca9ac57d62ae597685f0cd52dcc65d6e4cd6068c6fa8b32
Size

818KB
MD5

5054c54c1e7e90b120e301be61cf0ca8
SHA1

134d00fb788d232b45ce7c842ca8e575bbb10d8c
SHA256

1028a0540e49d2e24ca9ac57d62ae597685f0cd52dcc65d6e4cd6068c6fa8b32
SHA512

88518f68ac8a06efcfb787f1a635cf0e8719e0ee8e3a3a8f4ba988e35aec71cfae6790ae5bd63ec0ad1adf4beab45de7ad2c0c7bc9c1ce3c64c9fb6b7fa97273
SSDEEP

24576:p1c0ECysXE4GDOuulGTB/7Qp4IzSxXQfRTABr:pO07E4FGV/spLSNmTAp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/lawXalleqxxfgb.exe

Files

1028a0540e49d2e24ca9ac57d62ae597685f0cd52dcc65d6e4cd6068c6fa8b32
.zip
lawXalleqxxfgb.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 942KB - Virtual size: 941KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ