56f227c1ebaedb67eab76a1167725835c55d6b0d15881319a4cb7c46afaf4474 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56f227c1ebaedb67eab76a1167725835c55d6b0d15881319a4cb7c46afaf4474
Size

972KB
MD5

f36843373273dc2dc32694bf4082b427
SHA1

504d181485acdf440c595503c46d87cbb809797e
SHA256

56f227c1ebaedb67eab76a1167725835c55d6b0d15881319a4cb7c46afaf4474
SHA512

820e55a110360b21e561d559f222d3ebb3492839668d916dd0e0b0716b05f5b3a1554938d621a4427c243fa1a6a48cccab4604f3a31eb4d5721d9272275fb919
SSDEEP

24576:kQ8ZlVFLd4GGtdrg0F8PKTS69aP3NIH+iy:QHpvG3rFHTS6EIZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56f227c1ebaedb67eab76a1167725835c55d6b0d15881319a4cb7c46afaf4474

Files

56f227c1ebaedb67eab76a1167725835c55d6b0d15881319a4cb7c46afaf4474
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

RfBk.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 969KB - Virtual size: 969KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ