9b53a0863c48eefe067eaebf41bdd6cf077b98dcfff6c203bee848e6efa16f98 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b53a0863c48eefe067eaebf41bdd6cf077b98dcfff6c203bee848e6efa16f98
Size

877KB
MD5

d4eb56c50e36b37084be7613e0719adc
SHA1

2bfeef37da5434b6f5bac96ccf4798f89f012066
SHA256

9b53a0863c48eefe067eaebf41bdd6cf077b98dcfff6c203bee848e6efa16f98
SHA512

d80214928e6bad52a294fa0a9d87d646f6204dde3d0aa74c721e3e6040c4e18a928eea9a6dbc4ac1602f0b449e405263b56c888a6a1f19877642f76dfbb457e4
SSDEEP

24576:M+AQ32HdXnA3X/M7rkqeCwv8jVmOOOK9:M+h2pnA3PMsYwUjVsOK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b53a0863c48eefe067eaebf41bdd6cf077b98dcfff6c203bee848e6efa16f98

Files

9b53a0863c48eefe067eaebf41bdd6cf077b98dcfff6c203bee848e6efa16f98
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

WaJf.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 875KB - Virtual size: 874KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ