935319064e3a30103096a9241c2467b7d19fdbd371d078554a1a7503e1a92cdd | Triage

Sharing

General

Target

935319064e3a30103096a9241c2467b7d19fdbd371d078554a1a7503e1a92cdd
Size

616KB
MD5

f061401dd36dc8e88017ef9f9a43e5a7
SHA1

ea4d27815a1cf0f447fab333bdd52825e32807e3
SHA256

935319064e3a30103096a9241c2467b7d19fdbd371d078554a1a7503e1a92cdd
SHA512

91b74c01069a22f00e50c80174bba8d8d1379d11b51fb09027a18efd71a465507ba747185f36d670824eaa84b1bb2b49c81b310d04dafc22b3b5c0a55fea945a
SSDEEP

12288:ripUWpDRbyAAMNPOtta6rE9y4+HQi4ieitahh6j:riaWPbyXMNPOtkIEowi4UtaSj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
935319064e3a30103096a9241c2467b7d19fdbd371d078554a1a7503e1a92cdd

Files

935319064e3a30103096a9241c2467b7d19fdbd371d078554a1a7503e1a92cdd
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

kugJ.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 613KB - Virtual size: 613KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ