a992b7ef180c95750351ca6321342a4243d2d68eda90a9e680c688f799e1c0fe | Triage

Sharing

General

Target

a992b7ef180c95750351ca6321342a4243d2d68eda90a9e680c688f799e1c0fe
Size

281KB
MD5

c149eeedbc0a3f065ebca9d225088f34
SHA1

eceedfd90392a94b002a0b70da9f2810df2251db
SHA256

a992b7ef180c95750351ca6321342a4243d2d68eda90a9e680c688f799e1c0fe
SHA512

c356a5fa0d551d9e2ed7570f8f064ce7a57f719bf7265423bb4d5719ed2a73e86d26ee70fb94b94d1a49f0c3a4ddcc9ced4394b514025572a50390539e41f881
SSDEEP

6144:boy5p178U0MURaGyNXYWQzHazRfXrwSRnWwhrQ66fKkf2:boSeGUA5YZazpXUmZhZ6Sn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
a992b7ef180c95750351ca6321342a4243d2d68eda90a9e680c688f799e1c0fe

Files

a992b7ef180c95750351ca6321342a4243d2d68eda90a9e680c688f799e1c0fe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 238KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ