5196087b853c69041e83e590dcde048902db2c91366b7c88a664778c7df96319 | Triage

Sharing

General

Target

5196087b853c69041e83e590dcde048902db2c91366b7c88a664778c7df96319
Size

717KB
MD5

9ca4ab0995beec29fe11cb1f70ac8b5b
SHA1

9dd92b7b29e801da7eb01e8f6e44a801c87d4d3d
SHA256

5196087b853c69041e83e590dcde048902db2c91366b7c88a664778c7df96319
SHA512

0c4964a954023b810d701ab57f1ac0778e081b759a13a2cb14fd2b60745ec5bfe960b4ab291f99513e1a2f8cdab387ecf922146ae9a4cdfae81b1be405a14030
SSDEEP

12288:avTlvPUD9sPavSfe5TX8EL+dI3RPgVzQgsSpUk772uaoDLg6KzcKpa28NTpuFeJ4:w1PUD9sPavSfeBX8EL+dI3R23km7ioDy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
5196087b853c69041e83e590dcde048902db2c91366b7c88a664778c7df96319

Files

5196087b853c69041e83e590dcde048902db2c91366b7c88a664778c7df96319
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 714KB - Virtual size: 714KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ