622a3e45f9027915e003c2be97c83fdb1b3537727515372c514bd711ee32804f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

622a3e45f9027915e003c2be97c83fdb1b3537727515372c514bd711ee32804f
Size

1.3MB
MD5

30643c28a1f81bd95e67ee878bd3cc90
SHA1

43c9091910a5e368265164891669c4766775f525
SHA256

622a3e45f9027915e003c2be97c83fdb1b3537727515372c514bd711ee32804f
SHA512

3964441bb2c8df14d0b6cc74fb77f6f0cefdc94a88ed7b8bd0f7dd19fa48e79b94779e466fb2aec5c1647cd320cd69fe5ed8d0b151419cc2118669c1b7038aad
SSDEEP

6144:DwQohNWHFcAAh9cYpgwidY0+5ppcnNMNuvHucwAD:YD91pcIAD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
622a3e45f9027915e003c2be97c83fdb1b3537727515372c514bd711ee32804f

Files

622a3e45f9027915e003c2be97c83fdb1b3537727515372c514bd711ee32804f
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Builds\1\eEvolution 6\eEvolution 6.0.1 Release\Sources\Compra\nGroup.AYS\obj\x86\Release\AYS.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ