5c8aba8ab7690954d25915a3d03c7d23d3617c35ca044e23e414c7e6547f3d14 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c8aba8ab7690954d25915a3d03c7d23d3617c35ca044e23e414c7e6547f3d14
Size

712KB
MD5

6771c50a878c2b3bf8ae906c86271f83
SHA1

1ec18805ead2a9d8c388dbf1e4ef4be498ddd63a
SHA256

5c8aba8ab7690954d25915a3d03c7d23d3617c35ca044e23e414c7e6547f3d14
SHA512

48119c94ec7387172520dbc771305300251563209f1a8cfd40810cb4f87a6fbd1951166589093ff3b6427ec782983caf49a38b18c1c0b06b0f6544781b8b5bb3
SSDEEP

12288:5B1oVeonJtDXBHh2OoXvLtbJRDwwLQCWr38C3dphMCT+9y4sS3vbmZGY2xGp:xo53j59opDwe/CpAOS3TnnG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c8aba8ab7690954d25915a3d03c7d23d3617c35ca044e23e414c7e6547f3d14

Files

5c8aba8ab7690954d25915a3d03c7d23d3617c35ca044e23e414c7e6547f3d14
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ovCZ.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 709KB - Virtual size: 709KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ