38dd296b6b124c7e1815b8957193ceee729136a687595548c1383db1640f6ffa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38dd296b6b124c7e1815b8957193ceee729136a687595548c1383db1640f6ffa
Size

666KB
MD5

83995a0bf1a0222746062e9e325149f7
SHA1

89a86ede626a486c773930f3155d4dd76bfc859b
SHA256

38dd296b6b124c7e1815b8957193ceee729136a687595548c1383db1640f6ffa
SHA512

7a969e5a57fe36306c8711b97fef5cfd63a67b440b896ff22986ccedec9d595afab3ff35235163be382dff98139e3804fb4cbb940ac3e8da7bc1ed10199adc97
SSDEEP

12288:Pp+HBg0/hAuNEZV8gPHra5/PD1ZWmz+AnYHTa3PkX95Dv6MQXeapxBMVRXG6XZ:Pu/hDEL8g2D1wmiAnNkJ5QXeaxkRWm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38dd296b6b124c7e1815b8957193ceee729136a687595548c1383db1640f6ffa

Files

38dd296b6b124c7e1815b8957193ceee729136a687595548c1383db1640f6ffa
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

zVzz.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 655KB - Virtual size: 655KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ