b939036f2b6757522b3f3be59a38b4d8e0100b23dbeba2074b0af05bb97cb608 | Triage

Sharing

General

Target

b939036f2b6757522b3f3be59a38b4d8e0100b23dbeba2074b0af05bb97cb608
Size

687KB
MD5

fafeeab4defa8202f4a4511aaeb12171
SHA1

22adda5e16b1c893eac440e37879383749f2670d
SHA256

b939036f2b6757522b3f3be59a38b4d8e0100b23dbeba2074b0af05bb97cb608
SHA512

b68d865295ab06e7103938640ec72c4b8c5087da84a941f17850eb82ca0d54b2b3305c0294d310fe2de036f67560a6dce3ce4d5ab3edcf07e3f6f390df95301c
SSDEEP

12288:Q1x504bF9nOO6Fmd+zdOH8jmv40avbwziQspRmJ7PQmVPn8NOyG3sRbT:Q1w4b/nePd68ivt+wB0mbv8NOybRbT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
b939036f2b6757522b3f3be59a38b4d8e0100b23dbeba2074b0af05bb97cb608

Files

b939036f2b6757522b3f3be59a38b4d8e0100b23dbeba2074b0af05bb97cb608
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

YgJD.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 684KB - Virtual size: 684KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ