5b2508b0e2b91b70b02aa46660f26def741424d4dd7d4a4a59e9405ac0f63ea5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b2508b0e2b91b70b02aa46660f26def741424d4dd7d4a4a59e9405ac0f63ea5
Size

586KB
MD5

126c08dbfe2973314d20c43c93543d1d
SHA1

7b38ca64d588041362a96805dfafeb1b45936348
SHA256

5b2508b0e2b91b70b02aa46660f26def741424d4dd7d4a4a59e9405ac0f63ea5
SHA512

f449963a6cbf79a469ca84432c7a7688b1da05ca7ba27091ad5d32e2a8cb0207b7b7394f21c23e6486f685504d4946c370d85c1d1efbbc5bc2570e7ea1cc98b1
SSDEEP

3072:KjVYHuHnHfHKCn0lzWtCc3uuGVf43iJP6SWbMWPDn4VZ3wP47Oy0oGz/:KneSTQyWC1QWb4VC6d0B/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b2508b0e2b91b70b02aa46660f26def741424d4dd7d4a4a59e9405ac0f63ea5

Files

5b2508b0e2b91b70b02aa46660f26def741424d4dd7d4a4a59e9405ac0f63ea5
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\CIS\CO600_release-6.0\Tools\Tools.Automation\obj\x86\Release\Sc.Tools.Automation.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 451KB - Virtual size: 451KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ