e86a004b92ccb8c48296471f41d5fea55536f28652e037109a4b4ed4d22e7ff8 | Triage

Sharing

General

Target

e86a004b92ccb8c48296471f41d5fea55536f28652e037109a4b4ed4d22e7ff8
Size

172KB
MD5

60f1030c872d802f9bf5d8f1de3c4698
SHA1

2c8f12fadfbcfd007235a863c782893ae1bd3cb0
SHA256

e86a004b92ccb8c48296471f41d5fea55536f28652e037109a4b4ed4d22e7ff8
SHA512

5338a2c3c7ea7cd14fd02c72960484a6524882a051adc0ba6ba7445e1211c4d0518bb8a5b46fc0c280b3a324c3170f206c2c4f66d68c33f2c28d71f640d67413
SSDEEP

1536:bPGmTCpiPP/+Dh6vIVOT+Rso4fu8dfvwt1L8uvSdGs+yRm7WC7oIz2mPR2c0ngVt:rh1mP4/Mh+j82xIg10P4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e86a004b92ccb8c48296471f41d5fea55536f28652e037109a4b4ed4d22e7ff8

Files

e86a004b92ccb8c48296471f41d5fea55536f28652e037109a4b4ed4d22e7ff8
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\work\svn\src\Hanvon.KMS.MRS\obj\Release\mrs.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ