ee556a159fee1cb48604262ca59aa12928567e78523eed65d31727094ff07925 | Triage

Sharing

General

Target

ee556a159fee1cb48604262ca59aa12928567e78523eed65d31727094ff07925
Size

2.4MB
MD5

6fc5dfa94c6baaf54e5413b643ae72e6
SHA1

20325d4e07ddd04aba0eb6b6e426ab0ca1282420
SHA256

ee556a159fee1cb48604262ca59aa12928567e78523eed65d31727094ff07925
SHA512

246dfe7cb4894d7660092e31bcfcac891ba8247fec29d428987c6ec76c3ee199afce5e299f3b165f822e1a11c09b38b96dff8be9ae51cbe5abad8ba4781e7ee1
SSDEEP

24576:Riz0986q7CoBef8hyCtHqYo2gYdoAwtkVxCW4LUYCSrQsi7RePq+ombS96QX2wr0:Uz090CyWlDM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
ee556a159fee1cb48604262ca59aa12928567e78523eed65d31727094ff07925

Files

ee556a159fee1cb48604262ca59aa12928567e78523eed65d31727094ff07925
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ