517122a39f08ee807b38e3a391eac5bf8729ea9f6dba208765af4ac52e157044 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

517122a39f08ee807b38e3a391eac5bf8729ea9f6dba208765af4ac52e157044
Size

1.0MB
MD5

041e363ea1f607a1cb73bfea4bd6fef9
SHA1

83dd20bfa58bdb99ac0f44487d262fceda3d1e4b
SHA256

517122a39f08ee807b38e3a391eac5bf8729ea9f6dba208765af4ac52e157044
SHA512

f4e777e755f2fb309776c1311fbad02775551b9c1e3044c85d5fb2883934ec0e946e9cb7c60d94e679566b82983aadcf55549a029000bda363abbf9a7e20b220
SSDEEP

24576:WprK0fmqyZFqPimXPuxadXezUNVflLPHAuVc:6rvIZE6mXPuxadXezac

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
517122a39f08ee807b38e3a391eac5bf8729ea9f6dba208765af4ac52e157044

Files

517122a39f08ee807b38e3a391eac5bf8729ea9f6dba208765af4ac52e157044
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Narrator.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 956KB - Virtual size: 952KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE