4fa2d1189fdea1bf6db22fc6beac5ba501c8c900aa184791794c7085ed64fea8 | Triage

Sharing

General

Target

4fa2d1189fdea1bf6db22fc6beac5ba501c8c900aa184791794c7085ed64fea8
Size

1.0MB
MD5

1a1be394b368e7ca68bfdff7b927cbda
SHA1

d6f2652734731de6f15092732783b4647d6c9d30
SHA256

4fa2d1189fdea1bf6db22fc6beac5ba501c8c900aa184791794c7085ed64fea8
SHA512

7eeeb581b053ca91b0dfb551e81c6793bba4aad1dd02037b7e9549f752f839684ef8c2f38070ef88e5cec4ef6646cbe895c50e3e06a58b03f19af1d81f963a7a
SSDEEP

6144:KCZAZ21vNX0dPcopBpvgtKncObkp6/FE+/YROPUTTdkPOhIzilMxX8VaDAZ+5uU3:RKUvWO/SAAcUy3Av6uKlu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fa2d1189fdea1bf6db22fc6beac5ba501c8c900aa184791794c7085ed64fea8

Files

4fa2d1189fdea1bf6db22fc6beac5ba501c8c900aa184791794c7085ed64fea8
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Projects\!OldProjects\Projects2012\Tanto\trunk\Source\Integration\obj\x86\Debug\IIT.Enroll.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ