db418f7ee6bca1a20f6ea1d288f3eb208d918f8b52250ff320b51508f2ed13e1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db418f7ee6bca1a20f6ea1d288f3eb208d918f8b52250ff320b51508f2ed13e1
Size

21KB
MD5

bc70ea882fa7fa9e7622eea39b8f3ffb
SHA1

f5117c2f43623628e48fc5275bae45b132ad267f
SHA256

db418f7ee6bca1a20f6ea1d288f3eb208d918f8b52250ff320b51508f2ed13e1
SHA512

a1e518b4288df6aee2c5137f9c8bf1d46be62f974a284a57a287f134501114de82fc929e800751a6b5bc913af2ff50328472bf7286777452db62f9d21b73f786
SSDEEP

384:okpAqGRWfaRXdvFQxK/MhfY93U71xJBQoRd821BNche4kvCF7S1nWhPEl5/zu:sqkNQxMMhfY0NQo782XNctkvYGJWhPmY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/codes.exe

Files

db418f7ee6bca1a20f6ea1d288f3eb208d918f8b52250ff320b51508f2ed13e1
.zip
codes.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ