44bfb49af4876c68f0acc6258b48de52b224a49068a517f2ae26b8acf3f220f8 | Triage

Sharing

General

Target

44bfb49af4876c68f0acc6258b48de52b224a49068a517f2ae26b8acf3f220f8
Size

996KB
MD5

bc71796bc5b57259a9fbef15ad8d3907
SHA1

3c2085d8bed24e8122bedeeea5b22632e25d4094
SHA256

44bfb49af4876c68f0acc6258b48de52b224a49068a517f2ae26b8acf3f220f8
SHA512

f38a9405801436fca6ccc505edefd2aa9dc504e3dafd53b5ecf3e89ce6fa774801b6501c480047a3c53b90821428a02fdedeab38a37e82927e11ad04d2fbf364
SSDEEP

24576:0+bom6aO2IKtZ63PQIcD8is4XGQaepBiqJJ79zT6wiL3jq:romqUcP9c4jVIiqDlTW3m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44bfb49af4876c68f0acc6258b48de52b224a49068a517f2ae26b8acf3f220f8

Files

44bfb49af4876c68f0acc6258b48de52b224a49068a517f2ae26b8acf3f220f8
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

MKi988877.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 984KB - Virtual size: 984KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 354B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ