c2eca5a9b20e66821bcf89253e0d3b633f4fcd262fffd50951c5cd414fa9e6be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2eca5a9b20e66821bcf89253e0d3b633f4fcd262fffd50951c5cd414fa9e6be
Size

564KB
MD5

3a62f97dd621f7b1e097554228e3876d
SHA1

c85e5b5dfb93bfeb84006c25dd241d51f9191fa6
SHA256

c2eca5a9b20e66821bcf89253e0d3b633f4fcd262fffd50951c5cd414fa9e6be
SHA512

3ae5aecd260602649100873415c4514b84edaae8a1f4fbcf81386b5a3a4520cfe0aec07ef2af0a3a76fb03f10969c1be38bc5d767dcf0cacff4b2155f0919752
SSDEEP

12288:0Ki3momWOHS+LpyCPtlOYPBRYwWJqYv8T2C3:Sb/B+FyCOORYwWJqlT2C3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2eca5a9b20e66821bcf89253e0d3b633f4fcd262fffd50951c5cd414fa9e6be

Files

c2eca5a9b20e66821bcf89253e0d3b633f4fcd262fffd50951c5cd414fa9e6be
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ctfn.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 496KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ