44389e7910b6d6a6c2d55db0202bef0915861096765b20eb07939bab375a342b | Triage

Sharing

General

Target

44389e7910b6d6a6c2d55db0202bef0915861096765b20eb07939bab375a342b
Size

625KB
MD5

370dba63af3f41e00a9d8622d22d0e76
SHA1

176730353bb2f2b41a4426b8516f3f66ac1ee0dd
SHA256

44389e7910b6d6a6c2d55db0202bef0915861096765b20eb07939bab375a342b
SHA512

3d3d243e24a6706aeebcaafa62f15d9260d1532fd8148ef6d912ea1d433dc1868541b3dcf8cd49746d98167934bb9a9e8a5dd50fb8d4f8a3d3acfbc64e1f4183
SSDEEP

12288:t3dQiyo+/aqtRUr8LtfjYub9ZPBl8cMlS4Wl2FGkVzvYej7D:AhayU4LtfjYubLB2cES4LFGk/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44389e7910b6d6a6c2d55db0202bef0915861096765b20eb07939bab375a342b

Files

44389e7910b6d6a6c2d55db0202bef0915861096765b20eb07939bab375a342b
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

hUCI.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 622KB - Virtual size: 622KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ