525b60bb502dbfe1971c740b450d84f99f0e436d1be14ee7738f5b1488353ec1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

525b60bb502dbfe1971c740b450d84f99f0e436d1be14ee7738f5b1488353ec1
Size

1.2MB
MD5

37bd454fc5912af9e021453138c4219f
SHA1

aee2c35b676504fb8a24a8c2d662573370305ee4
SHA256

525b60bb502dbfe1971c740b450d84f99f0e436d1be14ee7738f5b1488353ec1
SHA512

9a9f658441daa994e409c855302a361a7f73535fc91b93b587db55179e9f23be75f6547e921107b660d78e68508dde507f36298176faf2b54e866e1e4617acad
SSDEEP

12288:HdXtfETKY/TNNYsqbsJqtjhRNpWdkvw9jTy3c0QBqJFLfqNMiK6e02:Hd92KY/hNYDbWqtj/NQdko121e+6O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/GLES Inquiry G-6463_pdf.pif

Files

525b60bb502dbfe1971c740b450d84f99f0e436d1be14ee7738f5b1488353ec1
.iso
out.iso
.iso
GLES Inquiry G-6463_pdf.pif
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 730KB - Virtual size: 730KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ