55273bb86eda9a403c0d0e7c2164694e57f5d73e5a3ba64b11f6892d3939edd2 | Triage

Sharing

General

Target

55273bb86eda9a403c0d0e7c2164694e57f5d73e5a3ba64b11f6892d3939edd2
Size

756KB
MD5

cfe2fb1f0577846b88f709d0fedeee37
SHA1

a23f34fe198fd27d707ef5a61e5765c66d0feb51
SHA256

55273bb86eda9a403c0d0e7c2164694e57f5d73e5a3ba64b11f6892d3939edd2
SHA512

f4f4abf95350403b72583aeb9404defacc3c6fccadd6149b851b68836ec0826ed0811bbb1c6d403bb6b6109cb0a229d4c0af068b73ca47d3992e80251b1fba5b
SSDEEP

12288:6dRgYVK+orv4MZ0xaZsT/JLxlwd5b6FJwvIlNLLp8xInIUbutMZJbpS:6Lg1+RsydxleIPVjLpOcIUbuoJF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55273bb86eda9a403c0d0e7c2164694e57f5d73e5a3ba64b11f6892d3939edd2

Files

55273bb86eda9a403c0d0e7c2164694e57f5d73e5a3ba64b11f6892d3939edd2
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

OlBL.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 753KB - Virtual size: 753KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ