94fabaa1071a7ace2442f6ed96079db2eaedd15244bc939d7f269407e7ddc66d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94fabaa1071a7ace2442f6ed96079db2eaedd15244bc939d7f269407e7ddc66d
Size

3.8MB
MD5

49d46a7ea98b9c8ba4776996281004e8
SHA1

54e847cfb078ca790d3b40261fa61e9d3fbd052c
SHA256

94fabaa1071a7ace2442f6ed96079db2eaedd15244bc939d7f269407e7ddc66d
SHA512

5774c4c8725cff07af74426aee6a5746ae3b231e11eecc2d9bb7627e9aa91b6d8c321efec8862a9c1ef2c884bba1dfdadb56a4f29401e00853f73ca524db0447
SSDEEP

49152:lTV3DiaI4YdA2bVpd2apYq9oCgUiB1alZ1BiljhFR:lTV3DiaI4YdA2bVpd2LwoGikr+lFR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94fabaa1071a7ace2442f6ed96079db2eaedd15244bc939d7f269407e7ddc66d

Files

94fabaa1071a7ace2442f6ed96079db2eaedd15244bc939d7f269407e7ddc66d
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ