ff93ddffc77a73cf86b65cb00ba3f94046e17a045576dc360b826bca39a2f24d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff93ddffc77a73cf86b65cb00ba3f94046e17a045576dc360b826bca39a2f24d
Size

2.2MB
MD5

67be5dde5e9e131993c0281f86c0d09f
SHA1

d7c3159df6780d981dc7b516f1d4ae258c6e93d9
SHA256

ff93ddffc77a73cf86b65cb00ba3f94046e17a045576dc360b826bca39a2f24d
SHA512

c6f3725fa01262c2689d39ab43d3649ae115303b6e72e1f6653d98239c8b4034af51c350dbb3f811e738ad8abe734168b2f51c91f0208ac06d16914366fd64ab
SSDEEP

49152:+TY5I7o4TELR0vbw0g2UxC3woEOD+8xT59/NEFq8Yfe:+TwIc4TELAbvg7g3ynM591EFMf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff93ddffc77a73cf86b65cb00ba3f94046e17a045576dc360b826bca39a2f24d

Files

ff93ddffc77a73cf86b65cb00ba3f94046e17a045576dc360b826bca39a2f24d
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

RSG.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ