04faf8c4cc0325fce4a56e623af38cd6e1b6a2baea2b273dd58a5cccdb29b3a2 | Triage

Sharing

General

Target

04faf8c4cc0325fce4a56e623af38cd6e1b6a2baea2b273dd58a5cccdb29b3a2
Size

2.2MB
MD5

27dd4a9ef94a4cc2ae316b06c92b33a4
SHA1

9f286079b49ac79bc3cf9f615d201e6e6cd8ddce
SHA256

04faf8c4cc0325fce4a56e623af38cd6e1b6a2baea2b273dd58a5cccdb29b3a2
SHA512

94c618ed932484b17e7d0aa3c069e1276468d3929608c8ee3e29ebc2db67107c459ba671392532858d6b3f37e5c9411208a879254318979126c5741269b1d6a4
SSDEEP

49152:y+JMgNcUmMq4v6ZchXGHN+ePwrF94q/MHtzTAwN/tuk0s0qLQZJbQ:fFr9vvqbwYrzTAYp//MJU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04faf8c4cc0325fce4a56e623af38cd6e1b6a2baea2b273dd58a5cccdb29b3a2

Files

04faf8c4cc0325fce4a56e623af38cd6e1b6a2baea2b273dd58a5cccdb29b3a2
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ