9d12ec761946f5c69fb4f6420bf688b3bec5a48517098df81d9959885d2eb0e5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9d12ec761946f5c69fb4f6420bf688b3bec5a48517098df81d9959885d2eb0e5
Size

897KB
MD5

d1b3f4a3886ecef35611c799d34f4c04
SHA1

4ebf7d53f4a5b12d425ed255bab533b30f6290a4
SHA256

9d12ec761946f5c69fb4f6420bf688b3bec5a48517098df81d9959885d2eb0e5
SHA512

75eb9be6a30745dd9bf9c83c69de4b86c368312497060107042eba607b31c6d7ba629adbd2a0941559ee52479e0b597a64a82516fc6660c161062b4a93fa4b12
SSDEEP

24576:YIMHlbB/Nht7vmINpIehIxoSuX0tqsh/:8zln+gIeZjXwqsh/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9d12ec761946f5c69fb4f6420bf688b3bec5a48517098df81d9959885d2eb0e5

Files

9d12ec761946f5c69fb4f6420bf688b3bec5a48517098df81d9959885d2eb0e5
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ZGrV.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 894KB - Virtual size: 894KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ