a685d3ad4b5eca41910842585afeb9c9c60f7b6950e22da6fb4497136b72bd11 | Triage

Sharing

General

Target

a685d3ad4b5eca41910842585afeb9c9c60f7b6950e22da6fb4497136b72bd11
Size

905KB
MD5

dc5d3003f2951629c1da3139c11b8498
SHA1

1a2224c371941cc9d8edae9bb5a2ce6a0f04f2fa
SHA256

a685d3ad4b5eca41910842585afeb9c9c60f7b6950e22da6fb4497136b72bd11
SHA512

1f1f152ed0f21ecaeb5e89e6d95bcb354fa2fce5c1d16e87590793f4f6014808da4c948a203f5034769ceea2c7929562b724bfefc3aa5a55731a15b1162c031e
SSDEEP

24576:2EueTkFJ4tyBkU2xOppXqtoYtlSSgFGtoUti3hN:SeeJEyWn8Bq6I5lQhN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Scan5437.exe

Files

a685d3ad4b5eca41910842585afeb9c9c60f7b6950e22da6fb4497136b72bd11
.zip
Scan5437.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

TwBF.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 965KB - Virtual size: 965KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ