54aced645e04d8efc8097eee50953d27e8fb2093837dafed10c9ed7e22317cd4 | Triage

Sharing

Copy URL Twitter E-mail

Reason

config extraction: CfgExtr crashed: 'BlackGuard' runtime error: slice bounds out of range [:5] with capacity 2

General

Target

54aced645e04d8efc8097eee50953d27e8fb2093837dafed10c9ed7e22317cd4
Size

15.8MB
MD5

d37cd7e8a7159f6dacd09a74735fa6ba
SHA1

6a9a787bf330ebe9c480fb1447dc2e8297721504
SHA256

54aced645e04d8efc8097eee50953d27e8fb2093837dafed10c9ed7e22317cd4
SHA512

305ca77e403dd0649c67cbe796396ca62bc4091619fa2c01357342ef751f7c5b1d50770ee542735f39ee7c9cb664c5c7276894afddc0b75af197f578d02c0573
SSDEEP

393216:hxiTCCHS4y0WyNUHKoc8tQsvcsM+o4YkSbOTByWR:biTp7yx9Hpc8astK7OIU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54aced645e04d8efc8097eee50953d27e8fb2093837dafed10c9ed7e22317cd4

Files

54aced645e04d8efc8097eee50953d27e8fb2093837dafed10c9ed7e22317cd4
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15.6MB - Virtual size: 15.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 262KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ