9a961174a589c446ce55268c993a46b28b7e8f1ef2a787e09d0f8d44e840e9b8 | Triage

Sharing

General

Target

9a961174a589c446ce55268c993a46b28b7e8f1ef2a787e09d0f8d44e840e9b8
Size

721KB
MD5

5e93f519586188784a0cfa0403239450
SHA1

8d359596403df92e30a28c731ba3dc5c3c71f9e9
SHA256

9a961174a589c446ce55268c993a46b28b7e8f1ef2a787e09d0f8d44e840e9b8
SHA512

9ac7d4062411c08e1e5aa5760e855cc1af07ff1611491aaa5230fcb0cd22d292cbbef565afdae8dba0ed20f07e9da2f232f9c40a8973c5d372936b25456832c8
SSDEEP

12288:40RY1xZyxuVRCvLHcIYn+D9tR/mc4KjDQ8kdgHZEMhdUsA2H:40RAyQV4v4e9t90KxkdIZEMhxA2H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a961174a589c446ce55268c993a46b28b7e8f1ef2a787e09d0f8d44e840e9b8

Files

9a961174a589c446ce55268c993a46b28b7e8f1ef2a787e09d0f8d44e840e9b8
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

DgWB.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 713KB - Virtual size: 712KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ