fa684df99d6738dccff56f71ffebe200b2b2c92a345ecfcb36810f41444b4868 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa684df99d6738dccff56f71ffebe200b2b2c92a345ecfcb36810f41444b4868
Size

756KB
MD5

340f0216d90cac379fbba0b6acbf85dd
SHA1

3be65577b02b5a09393d718eeaa24b7107f567c5
SHA256

fa684df99d6738dccff56f71ffebe200b2b2c92a345ecfcb36810f41444b4868
SHA512

b4c121d259a023551447406459327f728aff9726e2d6cacc49935b17b69376a0ad9b542cb85a8b0f45b08dac99da1cde0f91f8006a14390d42d0d88403c83c75
SSDEEP

12288:bICWET/mr9K+22BEEzFatngIj+wbce7oe2j4Th8xfW+eZrTOxoK5AL0ASsbXW:TWtb3BESY+wbceM4HRZ7L0ASYX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa684df99d6738dccff56f71ffebe200b2b2c92a345ecfcb36810f41444b4868

Files

fa684df99d6738dccff56f71ffebe200b2b2c92a345ecfcb36810f41444b4868
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

tuPK.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 754KB - Virtual size: 753KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ