b9c141bd767a6c2a5d4a539017840631f59563bf541c8e62b8b9718e076170d6 | Triage

Sharing

General

Target

b9c141bd767a6c2a5d4a539017840631f59563bf541c8e62b8b9718e076170d6
Size

1.5MB
MD5

3ccc507ced5e51c1cf03a2f7e38ff18a
SHA1

b121b76a0f425a029b49ba8e866818408a1395b9
SHA256

b9c141bd767a6c2a5d4a539017840631f59563bf541c8e62b8b9718e076170d6
SHA512

9a38d89659e2996b6a62ed0acdcedb532f1a073cd803c904305b39190e0b860a0dd50483845f288e35cb3c91a6ff499977f30d39d196b34800afc6ee38a5edbb
SSDEEP

49152:gPdz+ccFRVE8ItTM/tHJInR7ehrJ52Py+mwHt:gPdz+n+8AQUn9s/wmwt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9c141bd767a6c2a5d4a539017840631f59563bf541c8e62b8b9718e076170d6

Files

b9c141bd767a6c2a5d4a539017840631f59563bf541c8e62b8b9718e076170d6
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ