aa930167874993759993fac7516b3fc7e1184ec979523dad0e8b079fca201697 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa930167874993759993fac7516b3fc7e1184ec979523dad0e8b079fca201697
Size

728KB
MD5

8bac8687819c3b80d790a44d0a493c56
SHA1

f888344fcca27faaea1841bdda4bdb988cdbab56
SHA256

aa930167874993759993fac7516b3fc7e1184ec979523dad0e8b079fca201697
SHA512

42ac28ae2ac5cceffdf8a6d571f4c0f49937f4c332e85975a2f5fe6b1f5e0bf53131a7150fb63b001aeb8e35a4f388d91a91cefbb90f0d66ad2cd412e6265a5b
SSDEEP

12288:PRYMjhvPie/rByY7777777777777JfgNJprZzlLh1i3PhlpLqOw+s/34MsCxFsS1:PRYMFniyySoNvZz9h1i3Ph7LqOwx3BBP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa930167874993759993fac7516b3fc7e1184ec979523dad0e8b079fca201697

Files

aa930167874993759993fac7516b3fc7e1184ec979523dad0e8b079fca201697
.exe .wsf windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 721KB - Virtual size: 720KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ