df41a311d3067515d27b94217771d7bd4dcaa26602cf24fa007da5067f6bf324 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df41a311d3067515d27b94217771d7bd4dcaa26602cf24fa007da5067f6bf324
Size

1.3MB
MD5

84cb60e538c93a91ef95b2a86a326214
SHA1

db964bb43c321987e1304e26fd9aec1abd545ba4
SHA256

df41a311d3067515d27b94217771d7bd4dcaa26602cf24fa007da5067f6bf324
SHA512

857a9308d8cda603df16c47b4f382ba4c2116585e4b8d606ff7f7e880ea8df8426ee85e85aecea7655d339c9275abef92f37a8b3ebeddfea1447cef3e2035a21
SSDEEP

12288:5IKWET/mr9K+22BEEzFatn7jO4kqEVSqa/SN948fRKwgRAeOUNXaY8iJPb7yBFwx:xWtb3BEFAuKN+8f8CUNXksXyB1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/20052024INV.exe

Files

df41a311d3067515d27b94217771d7bd4dcaa26602cf24fa007da5067f6bf324
.iso
out.iso
.iso
20052024INV.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

XdqS.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 763KB - Virtual size: 762KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ