b992ec644ad539a82b25beb50ff92384 | Triage

Sharing

General

Target

b992ec644ad539a82b25beb50ff92384
Size

44KB
MD5

b992ec644ad539a82b25beb50ff92384
SHA1

be929f756c1aefa165b5e093a902f847c8196f69
SHA256

0b87177086e55bbf9f34c52c06e7c9a1984b75e3759d9ac162e489cc5221cad8
SHA512

151eccc6d973f465dca1f240fe1bbf32dccad8ccb3f9e69b09dc907dbc2f5b5260fabb9f55ee1e377fd00a7f4614ed0f6ffcd25e8d44207525d7c4601ad9fdb3
SSDEEP

768:FK7rz9bd70U9yC9lGCEvFjoSV+UUjMXPMRwdIfQH8GLpKo2kwIGy:s70U0kEvtoSV3Mfo9pTNGy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b992ec644ad539a82b25beb50ff92384

Files

b992ec644ad539a82b25beb50ff92384
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

cpaz.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ