aaa7dd0a090d19f0a8fec1da971376a2256e5969a9115c6856c05a152b9d8885 | Triage

Sharing

General

Target

aaa7dd0a090d19f0a8fec1da971376a2256e5969a9115c6856c05a152b9d8885
Size

3.2MB
MD5

d3c716b2bfb2cb4d03f4857588afd668
SHA1

f0214cec2fbf74ffd0d1ad36809eb05f61709dd2
SHA256

aaa7dd0a090d19f0a8fec1da971376a2256e5969a9115c6856c05a152b9d8885
SHA512

0552e95fd34184c32b1f93aeb4f442cb09163e6b950a7b40af546e11e107d3f933417adedbff3fa2dd9da966de007378fe226f6d0ecbc2739ed3289863021bf7
SSDEEP

49152:DnTVwnNTBoBMO+YrovpU/9roJdXN0BMOwLloBrugsu8xmN3Aek03noj45wlDT:mfOgRJdXN0B7+sleUJF3noxD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aaa7dd0a090d19f0a8fec1da971376a2256e5969a9115c6856c05a152b9d8885

Files

aaa7dd0a090d19f0a8fec1da971376a2256e5969a9115c6856c05a152b9d8885
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

dfsvc.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ