2dbbce99584a9a39663acac697f23e33a581f9d4172726160e7d62e71a5efb3f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dbbce99584a9a39663acac697f23e33a581f9d4172726160e7d62e71a5efb3f
Size

6.0MB
MD5

51cd9838792bc03f29451dc04243e9bf
SHA1

86ac56a81d0da810a85c461c2e1c223f20a170a7
SHA256

2dbbce99584a9a39663acac697f23e33a581f9d4172726160e7d62e71a5efb3f
SHA512

217a642bcd6ae331280a54a7f142d7856af67f276506f4aa1a23c0ed5e5bcac6a139a8b194f4090431bfbddfe4661cc911028c33d964defd57dc88750e773914
SSDEEP

98304:PRJu+TiVdMKhJiMKZ0LE/P7qye01zPOYgoS:7+MKhJiB/P7qye01zPNbS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dbbce99584a9a39663acac697f23e33a581f9d4172726160e7d62e71a5efb3f

Files

2dbbce99584a9a39663acac697f23e33a581f9d4172726160e7d62e71a5efb3f
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

usa_tech.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 207KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ