d46efa35996bcfd3085dc6c3d8874172 | Triage

Sharing

General

Target

d46efa35996bcfd3085dc6c3d8874172
Size

160KB
MD5

d46efa35996bcfd3085dc6c3d8874172
SHA1

931ca162e762a8b3678e7b1cfb96a6a9af2ec6c6
SHA256

3f8cc94758432593e80b4e010f9ff39961a2c936f73a526fce040766c87cccb7
SHA512

8f9f825390a57d2c1544d2e107ade6ed696435a72d88c19d38e1ee020bd44dbd9c22704abca3adbe89fdee2d0dfd327a89a4c637dc6b564b975294d73b48b882
SSDEEP

3072:8sDV6Az1kWgFvYGnJd6KpZV3uTN9WU/G9h3Gw590KqkbmzALbvl6:tQAfgFvYGJd6KpZV3uTN9WU/G9h2w59X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d46efa35996bcfd3085dc6c3d8874172

Files

d46efa35996bcfd3085dc6c3d8874172
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.teht
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ