1796db980da148dc2c21d6c41339d25e1d77b5eb40fa043bb331f286c49270b0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1796db980da148dc2c21d6c41339d25e1d77b5eb40fa043bb331f286c49270b0
Size

68KB
MD5

4feea229e14dba75756d26516c3495e6
SHA1

52f68ec2eecd5734e895eaec5fabdecf8260387d
SHA256

1796db980da148dc2c21d6c41339d25e1d77b5eb40fa043bb331f286c49270b0
SHA512

a09f53c2b250d69fa2928398613ab66fbd3d036caaf73c3b2866f486d6116cb5c87bde504cb2c61dbf8aadc91c86480ec0170a0e5acca2ada2185c3e98df4a23
SSDEEP

768:eMLQzG028YNeCr4W+MHeXFRJ+Q6bxRQGPL4vzZq2o9W7GsxBbPr:eoG523cW+MHc8Q6bxWGCq2iW7z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1796db980da148dc2c21d6c41339d25e1d77b5eb40fa043bb331f286c49270b0

Files

1796db980da148dc2c21d6c41339d25e1d77b5eb40fa043bb331f286c49270b0
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ResGen.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

]�j��u�
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE