281da6fbef19d09be96e459c65c6e108117793e98305f1ea28ccaa33808db09c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

281da6fbef19d09be96e459c65c6e108117793e98305f1ea28ccaa33808db09c
Size

622KB
MD5

fc4084258ebd4343f81ee4a2a1bd0903
SHA1

d65c2e6f7b57e976fee9bcb42d247e1b29bb218d
SHA256

281da6fbef19d09be96e459c65c6e108117793e98305f1ea28ccaa33808db09c
SHA512

b34f46c9a8d4e0c7694fb690ea2e3d23793f0058e870257def6d16d7a0a1411ca209c8c4bac86b5c46d372eebdcae374152de2e47a50bf008b12f297a2d5d9f9
SSDEEP

12288:0SpaVEFJhl2ARokllEevAsY3esqtjKv4cc/PmKe0D:0SMEFJhlJR1XEIYOsUfL/uKhD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Crypted_1713516528.scr

Files

281da6fbef19d09be96e459c65c6e108117793e98305f1ea28ccaa33808db09c
.iso
out.iso
.iso
Crypted_1713516528.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 346KB - Virtual size: 346KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 217KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ