209800aca2ca48387ed5dbdd844d24b6dd5c58a8dc07842fbf7fc1a96020732c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

209800aca2ca48387ed5dbdd844d24b6dd5c58a8dc07842fbf7fc1a96020732c
Size

2.6MB
MD5

5a1002c2cc43234a6a64f1a26a62cf39
SHA1

22e3ab82953900887a02783a393c45c553a3d091
SHA256

209800aca2ca48387ed5dbdd844d24b6dd5c58a8dc07842fbf7fc1a96020732c
SHA512

deba3a839e981bc1fcc89254bd0a8337e6a10ad61f1c4c7fa7c00803d59654c2eb5cd282a3d5826d6af8839b4dceb5cf982ca97af53640eb8cd7ba4d9921dc78
SSDEEP

49152:gAd+q8q8q8qspsjpVpVpQ5cJDTnKdhjY9IkHJDN2mO3Zf1aqb6qDb03zuP0IYWC1:ZDDDskbb65cwEJxVOraEDc36P0IYWCDU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
209800aca2ca48387ed5dbdd844d24b6dd5c58a8dc07842fbf7fc1a96020732c

Files

209800aca2ca48387ed5dbdd844d24b6dd5c58a8dc07842fbf7fc1a96020732c
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ