70aa8aed1a75cf6f8221f635c4cb690b429c9a712f1df659d07b8fa530a698a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70aa8aed1a75cf6f8221f635c4cb690b429c9a712f1df659d07b8fa530a698a6
Size

688KB
MD5

f9fdc4d1eafe549254167ae9e0c3cf53
SHA1

922845caa9ded94b4dae1adbaccd5ff23f133079
SHA256

70aa8aed1a75cf6f8221f635c4cb690b429c9a712f1df659d07b8fa530a698a6
SHA512

53e8551817212d0e893983f83072ac0c9071f63bf3dfb1df93280c4112c5a506b3bfd16305b0e80ad78c22b15fa78a9c9aaf9d02eaf090e5957ba686816814a6
SSDEEP

12288:1Ryz92newSJdA04py7CAJt+G64WxiRufkCqyOxjSOJRYWq:1szsex3IY2e1okB7oOJb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70aa8aed1a75cf6f8221f635c4cb690b429c9a712f1df659d07b8fa530a698a6

Files

70aa8aed1a75cf6f8221f635c4cb690b429c9a712f1df659d07b8fa530a698a6
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

rqTw.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 619KB - Virtual size: 619KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ