14e79f2f0a7df0c5803c3a4f2d757aa5a34c91dfd629602833754ecb0b645675 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14e79f2f0a7df0c5803c3a4f2d757aa5a34c91dfd629602833754ecb0b645675
Size

186KB
MD5

25cb0222f1ff317c3a950eb1da3dc7aa
SHA1

028ea3e9069a7b2e8f0a79a035e88e85da3fc4d2
SHA256

14e79f2f0a7df0c5803c3a4f2d757aa5a34c91dfd629602833754ecb0b645675
SHA512

e0fca84f6d7449b9894b7a51c97b566045d99a22cf354cebd5a10f33ad3ee64dfd32aa373768ce864f0525288b42625cea1c88514dbda6c2fdd703f5dec37459
SSDEEP

3072:GFjqnC3n7Qz28/8dpQ+I3zu0BHkH5dNpFu9DEd:G5j3S28Spaz1ubpyI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14e79f2f0a7df0c5803c3a4f2d757aa5a34c91dfd629602833754ecb0b645675

Files

14e79f2f0a7df0c5803c3a4f2d757aa5a34c91dfd629602833754ecb0b645675
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ