914f3a3ecfb554f94626e88f61b03b88cedc0b1f2a019cb41be40d8c931124a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

914f3a3ecfb554f94626e88f61b03b88cedc0b1f2a019cb41be40d8c931124a9
Size

2.1MB
MD5

5ac6ae598b841250efb743f55c7d7cec
SHA1

d39bb161767eb11dff4d219328c75f82dc439dd2
SHA256

914f3a3ecfb554f94626e88f61b03b88cedc0b1f2a019cb41be40d8c931124a9
SHA512

7defd499f277e0bdcb6a5e7bdf7cb70d4e3a1e129d13ef2cd9e9affff7eff0c36b86d2958d444483a015efbfd19b49ae80be68174adf5fe152ac3ea575c1c8e2
SSDEEP

49152:Io9IhaV5jCmHcQX/XIWBWwcOl/8KIvXYrK2NgeETa:IoZ58QX/OwcOKTX4h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
914f3a3ecfb554f94626e88f61b03b88cedc0b1f2a019cb41be40d8c931124a9

Files

914f3a3ecfb554f94626e88f61b03b88cedc0b1f2a019cb41be40d8c931124a9
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ