9a9ec27b87b7507adf39781f2f0d6cc5beeda31831149b59b0bb73212a54d36d | Triage

Sharing

General

Target

9a9ec27b87b7507adf39781f2f0d6cc5beeda31831149b59b0bb73212a54d36d
Size

210KB
MD5

3dba8f0ba68666e971c7581de7f2286f
SHA1

2d5e3acf710d497b0ad90a80df6a7ce16bf50e5a
SHA256

9a9ec27b87b7507adf39781f2f0d6cc5beeda31831149b59b0bb73212a54d36d
SHA512

56687d6f2ddb6c85b1fb0fd707da87bad11935f264ff8f0cc01b62666b8035208c07fe04cc550851db38f340603692729c0167b07489000cd72a0acd85215b29
SSDEEP

6144:Lx9fZTN2PdU/KXJcvvC9gYWqUndsByU/:tnM3XWn0g/qL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a9ec27b87b7507adf39781f2f0d6cc5beeda31831149b59b0bb73212a54d36d

Files

9a9ec27b87b7507adf39781f2f0d6cc5beeda31831149b59b0bb73212a54d36d
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\depot\NavisWorks\fix8.0\projects\vc9\NetRoamer\obj\x86\dodt\Roamer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ