f_000063 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f_000063
Size

5.4MB
MD5

daf3c06d7e0c3a809cc6565a557fc484
SHA1

a710d3623b3b7b933a38abbe4b3729e5a6831b62
SHA256

6e900ca4cfeeb146cb93e4584d261136ebee7b4e7d87548d760928811f3ce456
SHA512

283e531ac40c3d170bb3882d1e4437d27ad92fb6a89104fcee0446b8d6fcb30327d038456d7e8a83f92394b3eedc9972870428d2c212866362037ab81d89d5ca
SSDEEP

98304:tfk4I5HOxI8IEkJDiZhTMQHXlVWLBW4uys0fJr0u95I7ZDRQjAQhNZhSzNyqmnj+:t4ctIEkJGZKSXahj685I7b5QLS+L7a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f_000063

Files

f_000063
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ