141491341101102e7ea8d8c70b872d7d69e568272bd65a3b257938e422cbb7d6 | Triage

Sharing

Copy URL Twitter E-mail

Reason

config extraction: CfgExtr crashed: 'BlackGuard' runtime error: slice bounds out of range [:5] with capacity 1

General

Target

141491341101102e7ea8d8c70b872d7d69e568272bd65a3b257938e422cbb7d6
Size

15.8MB
MD5

aea8e087a3a1aab2b0f31a2163aa8b74
SHA1

e17698818bbe884adefe5f6f7d170f1428a61408
SHA256

141491341101102e7ea8d8c70b872d7d69e568272bd65a3b257938e422cbb7d6
SHA512

3948fd6e47c9b25aefa07bc0f6a9010c95f229f5a83c71d56ecd70d711f140e65e22fdcd780b005dd66a7faa296f288d0cfa546b43f62cca6cb3d76afd5acf00
SSDEEP

393216:LFiTCCHS4y0WyNUHKoc8tQsvcsM+o4YkSbOTByWR:ZiTp7yx9Hpc8astK7OIU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
141491341101102e7ea8d8c70b872d7d69e568272bd65a3b257938e422cbb7d6

Files

141491341101102e7ea8d8c70b872d7d69e568272bd65a3b257938e422cbb7d6
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15.6MB - Virtual size: 15.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 262KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ