f3f16394e19924cab07947150440a98afe830eed093d28a5c1864749f334c7df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3f16394e19924cab07947150440a98afe830eed093d28a5c1864749f334c7df
Size

1.3MB
MD5

299e7498a9dea3b12e0c70872b69368b
SHA1

e6161b31c7672d7f66d052b48b1ab026481329e2
SHA256

f3f16394e19924cab07947150440a98afe830eed093d28a5c1864749f334c7df
SHA512

f9a3f7d0270c3b1a14f5bb27256ab070068b5942a7154d0ee2bc2b91f38ba60e9e2d67a0cd691a29bbdadc57d4486004f60037be57e005dd2067698a451b929c
SSDEEP

24576:MWtb3BECGZup4YNqyDU/ak0VC+Gx9l/UKz:nZBEC+hYcl0VC+GHl/Tz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/OSW10953T8I3N.exe

Files

f3f16394e19924cab07947150440a98afe830eed093d28a5c1864749f334c7df
.iso
out.iso
.iso
OSW10953T8I3N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

jyho.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 756KB - Virtual size: 755KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ