199854b9d6151b9a4840baee02f0fe5f32e64d1504ecc3c6213fbef4e4e5037a[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

199854b9d6151b9a4840baee02f0fe5f32e64d1504ecc3c6213fbef4e4e5037a.exe
Size

3.0MB
MD5

b653710eef0d8aaadc5cf5f236e0ecb1
SHA1

c816d04e0f72d1ed43c0f3dbcf6a934d3fbbb173
SHA256

199854b9d6151b9a4840baee02f0fe5f32e64d1504ecc3c6213fbef4e4e5037a
SHA512

c1d2384c450567873868d5937fc9ce6d0c487c7f525a23d9a610782481bffaf761e8140325cef91bbd0d65b5ff9e0e66adfc67a01d5d39c03ee19fff5c8ba4b0
SSDEEP

24576:PzGZ43uKNwfiN+beHn77bowsa/uvi2e1znaXw2s7gJ9PtnTvRQauVcFgSEQYVXvI:64rHNUOn7SUT8VTvtY9zs/VffEBcFf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
199854b9d6151b9a4840baee02f0fe5f32e64d1504ecc3c6213fbef4e4e5037a.exe

Files

199854b9d6151b9a4840baee02f0fe5f32e64d1504ecc3c6213fbef4e4e5037a.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 327KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ