51af2df226a8541711d0d77cba382d662c4f15767271eb4b541a286e79100d4e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51af2df226a8541711d0d77cba382d662c4f15767271eb4b541a286e79100d4e
Size

735KB
MD5

a15cd1d52f16aa7b77da2dece78589f9
SHA1

c4d9c2fde8301bcb069a55e441fbcc4b6fa5c124
SHA256

51af2df226a8541711d0d77cba382d662c4f15767271eb4b541a286e79100d4e
SHA512

082b8d6d507aad601116ceefbab7cd3171ac9c90676386a85bb9261242eaaa3c73101ad74b2a1024087bfe296b3dc7f0c509f083b2e1334315902d63e71c69cf
SSDEEP

12288:NIDA7i+0iLHsxCArJtkRKVuZ4qb1LRmhc0e8u1ZC2/4K5bbRwGJvIvmBdtrekj3v:rqMMx99NuZ4mLs5e8uXL/DlRwpvmBLbz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DRAWINGS&SPECIFICATIONS.scr

Files

51af2df226a8541711d0d77cba382d662c4f15767271eb4b541a286e79100d4e
.zip
DRAWINGS&SPECIFICATIONS.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

yzrl.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 784KB - Virtual size: 783KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
__MACOSX/._DRAWINGS&SPECIFICATIONS.scr