57aa8232ed82d0667638c6442456b5150a2fc941e1b07ceac890ac96088f6490 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57aa8232ed82d0667638c6442456b5150a2fc941e1b07ceac890ac96088f6490
Size

1002KB
MD5

cc82c34275f1370d1cd5723076f05b2a
SHA1

d5d2c370f810fd32ee43c316a24e18646c538702
SHA256

57aa8232ed82d0667638c6442456b5150a2fc941e1b07ceac890ac96088f6490
SHA512

56fe3e6894075d7578779e65df9cdbe834843d45613d72f039e21dfe4352eb330cc2f7b44d6f9689021c00eac9d4b22a4473672c7e190e783c7d07656aff1bac
SSDEEP

24576:fmuA/h9Cpv3TJ+dKcTwGDl+ipDjDUkmFyAA:Ouch9CRDcdhw8l+ip7mFLA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/FST31064R5I02.scr

Files

57aa8232ed82d0667638c6442456b5150a2fc941e1b07ceac890ac96088f6490
.zip
FST31064R5I02.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Iozg.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ