9f4d2d8d0b7ec97c70e4a89cd58e7cfca442cabb410170a0bdda846555872c97 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9f4d2d8d0b7ec97c70e4a89cd58e7cfca442cabb410170a0bdda846555872c97
Size

681KB
MD5

13532d168bfbc0fe5aa5130dff312632
SHA1

2f8baf0943f6d6bcb87edddfc50c1695e3ad5f1a
SHA256

9f4d2d8d0b7ec97c70e4a89cd58e7cfca442cabb410170a0bdda846555872c97
SHA512

3a9c0901096e33c71505e4bbf4f511d638e70e167698cb4ea3999c9f3416d6b0f51aa3ba64acb3e31d84fd24c9d4751c9736bc9d7a7fddffef2939ae86f697b2
SSDEEP

12288:TbBPJwKcIqVgWjBWOTgJWfw7j52OgEbPQqdc96LyWCbOhwPfARXC960f0gtVW7:XBhcrVgWjBWbp/W0yzjfN60f0gtVW7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9f4d2d8d0b7ec97c70e4a89cd58e7cfca442cabb410170a0bdda846555872c97

Files

9f4d2d8d0b7ec97c70e4a89cd58e7cfca442cabb410170a0bdda846555872c97
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

uzkt.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 678KB - Virtual size: 677KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ