dfb0b9bd7acd52f9cb90a58b9015e8b77e12962f13c82c54634d41e0a11f2843 | Triage

Sharing

General

Target

dfb0b9bd7acd52f9cb90a58b9015e8b77e12962f13c82c54634d41e0a11f2843
Size

234KB
MD5

f82c0c7840ee4a1b0c29ee60aaa5b4c7
SHA1

a492478cc2537f225dc84d8daa30297100fa4c30
SHA256

dfb0b9bd7acd52f9cb90a58b9015e8b77e12962f13c82c54634d41e0a11f2843
SHA512

756aff4778f6d73e79d757d8e793ba3314a502e0fe99e0a1ad4301d7c5dabf4c3b8362da9b5e5e36f39045ef4dad115621aa3985b6fe1c0108d1355a495a48bb
SSDEEP

3072:5ZQRqMbfPAKRo/rtzQFYB93JlPPIsGspgBkrMvFoBGrUz3y40X7fAyDhEQDVLBDb:5Ub/m/BzsYn3IsgpdoIrUz3y4ebB6I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfb0b9bd7acd52f9cb90a58b9015e8b77e12962f13c82c54634d41e0a11f2843

Files

dfb0b9bd7acd52f9cb90a58b9015e8b77e12962f13c82c54634d41e0a11f2843
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wow_client.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ