f79da211c58514a2dc2579386425b19f4b191125dca5f6e59eeeb63cf9d75ed6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f79da211c58514a2dc2579386425b19f4b191125dca5f6e59eeeb63cf9d75ed6
Size

490KB
MD5

1c3c7a207e06d882fa87a168fa63bd31
SHA1

8b0fe25acd711f70921d61c6f60d4e54abb9d4bd
SHA256

f79da211c58514a2dc2579386425b19f4b191125dca5f6e59eeeb63cf9d75ed6
SHA512

46f5735660e271a9249138bebdf8becc1c6cb6b5197a8e78f2df2b0c6d57ca12a3398f5ea5230473d9f50fcda2050126cf58fe379e6a4aeebe799df7eb968731
SSDEEP

192:xPuTunAtt5Pg1lld07xFVd4yywe/2D4Ec7KdT:tYcAP+PlOzVdNpe/REmi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f79da211c58514a2dc2579386425b19f4b191125dca5f6e59eeeb63cf9d75ed6

Files

f79da211c58514a2dc2579386425b19f4b191125dca5f6e59eeeb63cf9d75ed6
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ