296a46307ca0d6405e061f599087c25fe5162ce754c09f240bed997b740064dd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

296a46307ca0d6405e061f599087c25fe5162ce754c09f240bed997b740064dd
Size

432KB
MD5

9b652945eaebab587b6915347885327f
SHA1

db38a6299f2b0c3671144609951af01a829d84c0
SHA256

296a46307ca0d6405e061f599087c25fe5162ce754c09f240bed997b740064dd
SHA512

166fcc28f4c04b75c663760d31026dc418d337678a7ea52f3bf2a27f2260248bd312f4e0dda264d0860c2e3f9d91f3b50c9b756fe023954c72f083c96cf14b2d
SSDEEP

12288:WDNGdvOFZwZQUOFh2bXYMCAzdwBClPY2MokwgS/R:CvWZM8opAa+JZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
296a46307ca0d6405e061f599087c25fe5162ce754c09f240bed997b740064dd

Files

296a46307ca0d6405e061f599087c25fe5162ce754c09f240bed997b740064dd
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

!Sugar
Size: 214KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

!Sugar
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

!Sugar
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ