e2aaef3b18d8bf5da4c8b2e801c5c2c0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e2aaef3b18d8bf5da4c8b2e801c5c2c0N
Size

319KB
MD5

e2aaef3b18d8bf5da4c8b2e801c5c2c0
SHA1

f8abfe2ea4b680aa388f99fee9760683e8444d45
SHA256

ec70dc1299de068e4e2d7b6d2eeff01df780f74b5d9b8e33fbe411f38d6bddc5
SHA512

0de474eb788c7895f293a72acc334033afd8167119bff07b8a320439311d2218b5f34e6ea4ad575f300d005e2957736d662865bcb4a383edf7bd4fdb306371ac
SSDEEP

3072:18Lxhy8+xTB1l3trI+Eh7gkzzKTr6kvqRte0jPsQuijI9Qvpc8/A:6FhmxTB7drI/7gkzKTr6gQun9Qvp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e2aaef3b18d8bf5da4c8b2e801c5c2c0N

Files

e2aaef3b18d8bf5da4c8b2e801c5c2c0N
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

g:\weliang_w8\stg\ccc2\apps\ccc2\Source\Applications\MOM\MOM.EXE\objNet4\rel\MOM.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 286KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE