4df1727037ab5114ec1f74c8c7cbe1292267c9f0c91a0b5ca94d5486b4ddb658 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4df1727037ab5114ec1f74c8c7cbe1292267c9f0c91a0b5ca94d5486b4ddb658
Size

629KB
MD5

40a31a4673aca390e1e389c5c215c576
SHA1

69e432def2f5e4ede1f9bfb379ea290c5b20d941
SHA256

4df1727037ab5114ec1f74c8c7cbe1292267c9f0c91a0b5ca94d5486b4ddb658
SHA512

be25f805bcdb4614bebf1674aa58c51119594dea5390c323682c7b12f23a24367f1bdf90fce7edf6af93286bfd83b354b4a46a4f3cc32d42af3710ff99fd5ed4
SSDEEP

12288:EwpCJMGFNyCsnG9yoDCIXVIbCifhfVL59pgYrwQGMw/rSqZbgBRtcfn+o:E/MGFdb9ylICnfV1vhrPpybgBRMn+o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/MEN.exe

Files

4df1727037ab5114ec1f74c8c7cbe1292267c9f0c91a0b5ca94d5486b4ddb658
.zip
MEN.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

yZOR.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 696KB - Virtual size: 696KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ