c299a16f11c6686cd53b25437a12754f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c299a16f11c6686cd53b25437a12754f
Size

8KB
MD5

c299a16f11c6686cd53b25437a12754f
SHA1

ba8284f376bb73594a49b23236afe5f4c16b5808
SHA256

730566594f3f2d7e67d34c6c26e8674d0f9c6c30efdc01fd991bcb0c1aac4e58
SHA512

a9867fa267179046a66e77954d2e328fa3b185bc977a5f55fac398cec79bc08a2c529080bd755035151932374c673145819bde1698d9a9d43d0db57404b2b736
SSDEEP

96:wjTVzdEEpXYgA/2vZHtbxilif8KhCF7TCFRCFRCFJCFHCFzCFsCF/PCU84RzNt:wXp342vnbH+wULz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c299a16f11c6686cd53b25437a12754f

Files

c299a16f11c6686cd53b25437a12754f
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ