64f0ff5ab3981d1419de9f9b5286e28845c841fdd850502781a79eaf99000834 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64f0ff5ab3981d1419de9f9b5286e28845c841fdd850502781a79eaf99000834
Size

50KB
MD5

9d6f0ab69a49f44c4630f5115f164d9f
SHA1

880ec8ce6cf49aece5c83c7c851993c88a2d2a5b
SHA256

64f0ff5ab3981d1419de9f9b5286e28845c841fdd850502781a79eaf99000834
SHA512

9e9749200f75b1743e774ea0ce697aa1cc5044692451db6c293a22447d4265b7001224a3b4b8611da141d4fddc246ffc8cc0e2a3b2179f927799c380d0c69342
SSDEEP

768:obS8uLte+H4NF/6pK1Yd/kRY6kmMQbkyYK1n17J32GtnZ:/LrH46AmhkRpfbkyYKnjnZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64f0ff5ab3981d1419de9f9b5286e28845c841fdd850502781a79eaf99000834

Files

64f0ff5ab3981d1419de9f9b5286e28845c841fdd850502781a79eaf99000834
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

CQUpdate.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ