e04070dabeb56e7c0457b3826b5973d7917f834407b435522e0421e60785f25a | Triage

Sharing

General

Target

e04070dabeb56e7c0457b3826b5973d7917f834407b435522e0421e60785f25a
Size

1.1MB
MD5

96c2943d7065c6febb084c958b122dc1
SHA1

354029dc6ed072db2c2180baf068ce16a3a96e49
SHA256

e04070dabeb56e7c0457b3826b5973d7917f834407b435522e0421e60785f25a
SHA512

f28ba13b796d1ecd94069f88ef0fdd622d899cdc4508742470122eceec37d21cc53d6005f46073c559e3b1a7d72f11cd7a64fa5e33f58da2d610674055f0d25a
SSDEEP

24576:rbw+1bAypcW+Co+wd6hzCwZbZKLgPYPb+5SpwggAuf2MI:5VO61qpwhEEgPNJI2B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
e04070dabeb56e7c0457b3826b5973d7917f834407b435522e0421e60785f25a

Files

e04070dabeb56e7c0457b3826b5973d7917f834407b435522e0421e60785f25a
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wIUG.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ