3b0e61d6cfe1df9b7406723ce49f605e | Triage

Sharing

General

Target

3b0e61d6cfe1df9b7406723ce49f605e
Size

479KB
MD5

3b0e61d6cfe1df9b7406723ce49f605e
SHA1

b796a6c31edd70c485b5590f1639c76e1876deb8
SHA256

ed96d46674a358fd03d9996721549bdeebaffe1547d0bffa2ffaf08d9289009e
SHA512

9134a78f005c5054c0ce8b0be0a4448d3e0717a4df2e07f0b1812a49c90831c65203992632d530e1c03873d2c70caa33482001e76a775cb263d85ce0b99a0c10
SSDEEP

12288:wDR+Sb7gHCN1crY/kcinF6AwyOMQetsOUgGkrNc:4tb7gq1w9FbwyOMBPRGkrN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

3b0e61d6cfe1df9b7406723ce49f605e

Files

3b0e61d6cfe1df9b7406723ce49f605e
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

kkzV.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 476KB - Virtual size: 476KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ