beb4e22865b0de65f674bd2687902e96aeddee2122d676865a3a569166a2b71d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

beb4e22865b0de65f674bd2687902e96aeddee2122d676865a3a569166a2b71d
Size

639KB
MD5

729c3039e2b594aa98c380b63bbd6dcb
SHA1

7ce6e9e89d9626650ae82da7acded653b54c3f6f
SHA256

beb4e22865b0de65f674bd2687902e96aeddee2122d676865a3a569166a2b71d
SHA512

c0152f3132fc48a50f522a332c23890e881ace8323ee941b48b331c12c2737e2d95d12c4d6023f8e947107a1ae358a33eef6f69017d5ab64500dcf33ff0744fd
SSDEEP

12288:n1GYCVkrkAbVhtvHT26FZohB3nDb/blVXD57I2yRxDRUGtSFIUUTM:nikwAbVHa6FZCXzlDM2MDR/t+B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/JSW510962T8I0.scr

Files

beb4e22865b0de65f674bd2687902e96aeddee2122d676865a3a569166a2b71d
.zip
JSW510962T8I0.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 650KB - Virtual size: 649KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ