dd119bc90c4949911b140409809a61f4b418a0b56e6a84e1cf0bff3c44f3b965 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd119bc90c4949911b140409809a61f4b418a0b56e6a84e1cf0bff3c44f3b965
Size

1.1MB
MD5

2d3dffe6a5e16415a905cc94db1ab1be
SHA1

434b96882031e80b42117ac95bdf5b8dfe28444a
SHA256

dd119bc90c4949911b140409809a61f4b418a0b56e6a84e1cf0bff3c44f3b965
SHA512

19a80e74ec11ce3f5ce4963425565e2178a5b73cb850059935e5e0832d29d345be0c67e170a62108d85508f9f7468d8398c12a3c64fba73db3e98e9d1a48fb25
SSDEEP

6144:d3oVGX8BRucruEkdAfOjzhLVsq1f6aaXxarmVq1f6aaXxa:d3LcrJACmMs8s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd119bc90c4949911b140409809a61f4b418a0b56e6a84e1cf0bff3c44f3b965

Files

dd119bc90c4949911b140409809a61f4b418a0b56e6a84e1cf0bff3c44f3b965
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 777KB - Virtual size: 776KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 347KB - Virtual size: 346KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ