bb80619824e359a50f93122eff77b1a076472885f5415d755711dabc5a3e98ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb80619824e359a50f93122eff77b1a076472885f5415d755711dabc5a3e98ba
Size

959KB
MD5

130f650c7286fbf93dd4518027c02466
SHA1

3d9a7729afe5bd7cd0d884e62d17726b81fbcf56
SHA256

bb80619824e359a50f93122eff77b1a076472885f5415d755711dabc5a3e98ba
SHA512

d7072a6dc6290f6f52f1a15af66b7b08f544d3c4583e91d007ed49e040d6e3503e8e0d19f917d0a2c33a1b4c7781accc96b56e7b3feb9aa959f3ab9d5592f80b
SSDEEP

6144:i2k5kPFOM+V8RUNKBP3npj4/0hv+/So9tpltdaFv+WDUlFl50lt+2qB+E4X:yke8bP3nCeQSo9tp8LUlFl5Fp+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb80619824e359a50f93122eff77b1a076472885f5415d755711dabc5a3e98ba

Files

bb80619824e359a50f93122eff77b1a076472885f5415d755711dabc5a3e98ba
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

aspnet_compiler.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ