da6a021366f5c87525c8b8e1622b6121e6358949599137281226fff1a497e11e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da6a021366f5c87525c8b8e1622b6121e6358949599137281226fff1a497e11e
Size

659KB
MD5

9b7173bf09ad13060a7ac8bc95ecd3d8
SHA1

876a196b5614bdf0c74f4ca7251f7ea7d2f632de
SHA256

da6a021366f5c87525c8b8e1622b6121e6358949599137281226fff1a497e11e
SHA512

47e2a6781e1ac9f98ac29b2f167073d4a31dbde68a0d6ba1678df54728833315adfc15dd3b6ae15ef8d46e043b1e6562caeeaff0b415fb3f30d9c2354ab13864
SSDEEP

12288:kLIPxCWZB26oMss8Q6zSnl4e3e3j8UQ7yLdxpWyU+xBL:kL4CR/Mss8QhlNiQ76dxpPn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/HNBYKeMiVUCpHnX.exe

Files

da6a021366f5c87525c8b8e1622b6121e6358949599137281226fff1a497e11e
.zip
HNBYKeMiVUCpHnX.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

sxyy.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 732KB - Virtual size: 731KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ