5f770c2fe611558cf843b34c589c8ddee85ca1405c1a3d3d7d9150cda9be516e | Triage

Sharing

General

Target

5f770c2fe611558cf843b34c589c8ddee85ca1405c1a3d3d7d9150cda9be516e
Size

694KB
MD5

363bce5ce1295d883ffa9b10b4a79e99
SHA1

e2f17ff88645c4a4da1369ea4fc51a97fc3dca41
SHA256

5f770c2fe611558cf843b34c589c8ddee85ca1405c1a3d3d7d9150cda9be516e
SHA512

775d5cde6a580ac840c913ba92bf134b33854d3df431996ebb0bfd962940a2484e87ec81a709262950f0018b91754be3c062ec7dce10beda85ffce3dee473569
SSDEEP

12288:O+DbgAB778QeIcPfePgdBNw2HrTDiLdX4hBjwpjnGqu86kOX88w30VmgdA5C:3gABk2QB1LTmd4Wpjnz7OX8pge

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
5f770c2fe611558cf843b34c589c8ddee85ca1405c1a3d3d7d9150cda9be516e

Files

5f770c2fe611558cf843b34c589c8ddee85ca1405c1a3d3d7d9150cda9be516e
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Gbux.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 691KB - Virtual size: 691KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ