02fea259c2c89804f3847b05591768235e18208a7ee86a7f9b8da25d808122de | Triage

Sharing

General

Target

02fea259c2c89804f3847b05591768235e18208a7ee86a7f9b8da25d808122de
Size

546KB
MD5

27decac2c2376a9a388116deac36df14
SHA1

6dc4066667562ae3e40c12394ba9a20fceb7c232
SHA256

02fea259c2c89804f3847b05591768235e18208a7ee86a7f9b8da25d808122de
SHA512

7953a7bc6f357d214b53399e7bb8617cfc880ab8e3610a583e996fc8df36092806e8cddb1579c2d3f265d7d3108ca5f7366c3d437ac515a2aa883712ba905348
SSDEEP

12288:WK/+QZhyLWUWPvsKPdkO0FcH5K4kmKOjABdWwBx2w94nsgOEu:WKRZMajnvpk0IkHns5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/sRdjnXWxDaXi9aM.exe

Files

02fea259c2c89804f3847b05591768235e18208a7ee86a7f9b8da25d808122de
.zip
sRdjnXWxDaXi9aM.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

hAzj.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 567KB - Virtual size: 566KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ