91657a958c3f23cc9950cdbc8ad3f42b3738ba46baed9f2421e64ba4368c1352 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

91657a958c3f23cc9950cdbc8ad3f42b3738ba46baed9f2421e64ba4368c1352
Size

40KB
MD5

0016e05140221ace800657f8894ec47a
SHA1

1c0663fead2054e2f0401a50b1cb3bf7f07655d0
SHA256

91657a958c3f23cc9950cdbc8ad3f42b3738ba46baed9f2421e64ba4368c1352
SHA512

c95eab04b2ebe9443cd8312f21a9806daee5dd114d30f539b6efe49ffa4f93771377eefa415ab5859cd495839c536fcd3b8c9a974f2592762d7a784192fbf9f8
SSDEEP

384:9FvtKQGpknNQL/30YNn7LBeEytaauQNBAEyWv+n2Lqv9EX:9AAYNPBePDNBAS+2Ic

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
91657a958c3f23cc9950cdbc8ad3f42b3738ba46baed9f2421e64ba4368c1352

Files

91657a958c3f23cc9950cdbc8ad3f42b3738ba46baed9f2421e64ba4368c1352
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Bnaliar.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ