f9c2e69fd14b609d162834f2aa90ea0dfffc1a8b46b07f683e91b4c094d60022 | Triage

Sharing

General

Target

f9c2e69fd14b609d162834f2aa90ea0dfffc1a8b46b07f683e91b4c094d60022
Size

714KB
MD5

e152f45fc44509ba5b06c5e9947db045
SHA1

ae21e818538dff3462f57d25bef40d08507cb923
SHA256

f9c2e69fd14b609d162834f2aa90ea0dfffc1a8b46b07f683e91b4c094d60022
SHA512

9f160e82996e22dfe241c37428b97a81cb2072a34be38746dffdbc5a49da461f0e48310935548e2c979eda3e2aec4364d2559b3cee6cddf84447afc751ad0b80
SSDEEP

12288:YHwgk26OZDx/OSL9igx26Ifj6iubmMIc+MjbHSnhsRMUIFFTdr:4/VWYhsb6ifyvjGhsCFT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9c2e69fd14b609d162834f2aa90ea0dfffc1a8b46b07f683e91b4c094d60022

Files

f9c2e69fd14b609d162834f2aa90ea0dfffc1a8b46b07f683e91b4c094d60022
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

nmUk.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 712KB - Virtual size: 711KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ