f15fb3befd6ae12ea63e2b94814bc4e0N | Triage

Sharing

General

Target

f15fb3befd6ae12ea63e2b94814bc4e0N
Size

5.3MB
MD5

f15fb3befd6ae12ea63e2b94814bc4e0
SHA1

daa33940a1ef60cb98ab36c61b9ffdeb30067014
SHA256

b40829a2679c70bd62334e4eb5357decff759fdc4c5f3427fbf59d236a83aff9
SHA512

5c032bc1f1451d02c04d5c1fcab14479ebf78c3491e2c2a81954ee7ae5ca7be6087b2da25c20d0d52ffe628894c31b9f362434f70aab29e5031f2039b1665f59
SSDEEP

98304:iiUupNGhzkE7RR/fh6ImzzJoDfuBcMv+A73XA:C+GhzkE7jHh6ImzD+F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f15fb3befd6ae12ea63e2b94814bc4e0N

Files

f15fb3befd6ae12ea63e2b94814bc4e0N
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

TbiG.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ