1f9849c59d0b40fff29b9377843df925b9524dd84d5d7283d73b108a7b783e41 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f9849c59d0b40fff29b9377843df925b9524dd84d5d7283d73b108a7b783e41
Size

700KB
MD5

40ba7d1a6da0c82157a5b7b9bc658efd
SHA1

281038ad427f591a8bc15fe532c5b4c537c59705
SHA256

1f9849c59d0b40fff29b9377843df925b9524dd84d5d7283d73b108a7b783e41
SHA512

faa2764dde7c5672a7a6604efea3896d9fe977721a96cc8e934e855b1ffa7bb4bc30088ba4d7bb7e04a301882f7bafccf14cf88ab582dd5d8740eb04c4489793
SSDEEP

12288:+zwSDzsiL9dkSS5c4kR9Zg4cd+Tp2z/6QZPzamlI1mUn:+zwSDDQ+4kRUBgTG6Q3pU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f9849c59d0b40fff29b9377843df925b9524dd84d5d7283d73b108a7b783e41

Files

1f9849c59d0b40fff29b9377843df925b9524dd84d5d7283d73b108a7b783e41
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

rukl.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 697KB - Virtual size: 697KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ