e91a5f3645ba746b0193e93d69d50e7d711c1a875a96f721c8cfac1b245122a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e91a5f3645ba746b0193e93d69d50e7d711c1a875a96f721c8cfac1b245122a9
Size

1.4MB
MD5

6373446c28fd65a1de2f84870ec40a1f
SHA1

12d2448a188d247369541da9ac9c941e570c60b0
SHA256

e91a5f3645ba746b0193e93d69d50e7d711c1a875a96f721c8cfac1b245122a9
SHA512

697209a3b7978591aedec781ab835fbe58627053ca195c5264626011562b002bee1156f0a3ce76ba8a0114b25f769421969eb0f6b71ede19b83dde0674891cd6
SSDEEP

24576:hVF/NNuZvtaBoy2kmu6nOFtxaymTFCSsrwmPMo3lx9NcMI/5dXkl:hP/NoZVspR6nOPozF7mV3lRQB5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e91a5f3645ba746b0193e93d69d50e7d711c1a875a96f721c8cfac1b245122a9

Files

e91a5f3645ba746b0193e93d69d50e7d711c1a875a96f721c8cfac1b245122a9
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ