7f98d649a99fae1f809ced070db35e1cd10f5343d3c53201974e725844e12b30 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f98d649a99fae1f809ced070db35e1cd10f5343d3c53201974e725844e12b30
Size

758KB
MD5

bcac399fe2e61d4ab3821d2f1f6928f6
SHA1

63b1a63dad0c8dbe7e986caab91034bae6e72833
SHA256

7f98d649a99fae1f809ced070db35e1cd10f5343d3c53201974e725844e12b30
SHA512

7ffa061e80aba17c1a7caae5af4ab92898d7e9714b69e3e53100b97af895553033b999fcef29e5236bb8639e1035cc5814512bf18674866ffbcdf9fa0d7ba685
SSDEEP

12288:fxfbw2Y/YLNoAtKibjtGALxYSoE6qQ0ff94M+Uee/JYeHgYFYPYMjhvPie/rByYL:fxfk248NJT3EALboE9f94lUe/JPYMFny

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f98d649a99fae1f809ced070db35e1cd10f5343d3c53201974e725844e12b30

Files

7f98d649a99fae1f809ced070db35e1cd10f5343d3c53201974e725844e12b30
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ZirX.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 689KB - Virtual size: 689KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ