cf4613966a1fe8d7797840e25d19811a8ca2dbf52681395cee55b1cb7d5c2d9a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf4613966a1fe8d7797840e25d19811a8ca2dbf52681395cee55b1cb7d5c2d9a
Size

103KB
MD5

d568cf1b273c385022947ed6ad85c265
SHA1

fc91a0e3c779f1c9cfa8efaa4644664ed3ba08f8
SHA256

cf4613966a1fe8d7797840e25d19811a8ca2dbf52681395cee55b1cb7d5c2d9a
SHA512

8f41bf289b0dc53e5fbbd9835711451775be097618fb2826b18cadc7f17ca5de6cddaddeecd229352de31e753ede5413866afffdebe00d1d5b816ecc9b62c269
SSDEEP

384:ell77pFDFTxWL3dZHrFA9cPqV6JHCdkuq4b2omCqYsHYzdu0FtOztz2kuEPMqLy3:2tTxk3dZLFA6PycH2yEDmThafKcEXa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf4613966a1fe8d7797840e25d19811a8ca2dbf52681395cee55b1cb7d5c2d9a

Files

cf4613966a1fe8d7797840e25d19811a8ca2dbf52681395cee55b1cb7d5c2d9a
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\p4\stg\ccc\apps\ccc\Source\Applications\MOM\MOM.EXE\obj\Release\MOM.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE