bef2b2b092e79a114090405979e5f890524176e97c40d7deff790eda1fd23134 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bef2b2b092e79a114090405979e5f890524176e97c40d7deff790eda1fd23134
Size

188KB
MD5

8888da88fcb43477c6412599e42ef6fd
SHA1

609d3d869cf02a6377a15942a4ff76308904ed72
SHA256

bef2b2b092e79a114090405979e5f890524176e97c40d7deff790eda1fd23134
SHA512

104d5211967cd213ef62244387f5d3252f473d39eacfffadcfa255b9be11841c90fbf40d7e52c3a91d1c343138f8e073a5023f599ecc8cd70006c64a82c55afd
SSDEEP

192:xPuTunAtt5Pg1lld07xFVd4yywe/2D4Ec7KdT:tYcAP+PlOzVdNpe/REmi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bef2b2b092e79a114090405979e5f890524176e97c40d7deff790eda1fd23134

Files

bef2b2b092e79a114090405979e5f890524176e97c40d7deff790eda1fd23134
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ