114bb0c748716cd1f1d40aa9ee7ed0b1fb51a885cb1386db5be1dbb59d61d61d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

114bb0c748716cd1f1d40aa9ee7ed0b1fb51a885cb1386db5be1dbb59d61d61d
Size

607KB
MD5

db68241fd3ff013984272ca0f36b1e4c
SHA1

d8ccbbb778294e3241a4ac94c89d773986ab1b60
SHA256

114bb0c748716cd1f1d40aa9ee7ed0b1fb51a885cb1386db5be1dbb59d61d61d
SHA512

8074ca5e77116a3bad938bd6be058f2c88e478f64517d54006e02adf135319b43658fe56a833abc392138c26e531b318e06a55a02959107acea485c47f16700c
SSDEEP

12288:MftgcpJLbA+iMFPut9oyru924GHQikiuJwCnPYZWK7+vu:4tgcHbAhMFPutWQucwikn5wZWhu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/P020241901.exe

Files

114bb0c748716cd1f1d40aa9ee7ed0b1fb51a885cb1386db5be1dbb59d61d61d
.zip
P020241901.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

kugJ.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 613KB - Virtual size: 613KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ