f680fae92f3029e0f84f8d0190348d1867ba8b535af40a4881b5c9dea40542a8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f680fae92f3029e0f84f8d0190348d1867ba8b535af40a4881b5c9dea40542a8
Size

624KB
MD5

f99d0e8072e9a9d4ea46ee148296231d
SHA1

b141620e7c2d93c1f37fc3113a9917637f91d1f4
SHA256

f680fae92f3029e0f84f8d0190348d1867ba8b535af40a4881b5c9dea40542a8
SHA512

a9dd9ec08774408d131db8be311766bf9a0deabb3f94df4f0a4ce4d8e72a78c52ba6cdbd229119c85f16208dcae144b8c3246d4134330428ae819783855712e9
SSDEEP

192:xPuTunAtt5Pg1lld07xFVd4yywe/2D4Ec7KdT:tYcAP+PlOzVdNpe/REmi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f680fae92f3029e0f84f8d0190348d1867ba8b535af40a4881b5c9dea40542a8

Files

f680fae92f3029e0f84f8d0190348d1867ba8b535af40a4881b5c9dea40542a8
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ