308d96cbb4215c4900ece960e1c4042a0137f0aaad60f1c4eecae0a541ed00f0 | Triage

Sharing

General

Target

308d96cbb4215c4900ece960e1c4042a0137f0aaad60f1c4eecae0a541ed00f0
Size

689KB
MD5

39e05a59126848d15dfacf8cdbf756cb
SHA1

c7eb7c1940434374b3061b5da1f46aeb2a4880ae
SHA256

308d96cbb4215c4900ece960e1c4042a0137f0aaad60f1c4eecae0a541ed00f0
SHA512

a354540178f1661cd8fddcc99ee10f3a3f510ceb4ea21da780e450a06a8fb979f1515c4fb883f40be50d10d08a2461f91dedb954d2831e57232e181516d5d8b8
SSDEEP

12288:c+DbgkB778QeS4QIl1IS5zO91f3Eupk4j9wsoCN9tdq5:VgkBeQu9O91f3ruPY9q5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
308d96cbb4215c4900ece960e1c4042a0137f0aaad60f1c4eecae0a541ed00f0

Files

308d96cbb4215c4900ece960e1c4042a0137f0aaad60f1c4eecae0a541ed00f0
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

siKQ.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 686KB - Virtual size: 686KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ