936c4a6f76476de8a86d785fbb5b782ca85d5afaa680ca5451250090824f58ad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

936c4a6f76476de8a86d785fbb5b782ca85d5afaa680ca5451250090824f58ad
Size

3.4MB
MD5

aa1ed3f316b40c21d0a0caea2412c9e3
SHA1

1585356564d4bf68a4811e03e84fb841cadd91bc
SHA256

936c4a6f76476de8a86d785fbb5b782ca85d5afaa680ca5451250090824f58ad
SHA512

e4a3b97e6c19efb632701dbd9b196d23891b0ea7870a1cbe01f1d460df17dfe52b44f3b9017674c8afe68a9112b2b787ebf25f24aca5800e76a3ac9943132a30
SSDEEP

98304:S+/vHiiPFMLCEOfdkGjkddln8IyWLieP:S+3iiP2CEOyGjXzWLieP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
936c4a6f76476de8a86d785fbb5b782ca85d5afaa680ca5451250090824f58ad

Files

936c4a6f76476de8a86d785fbb5b782ca85d5afaa680ca5451250090824f58ad
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

AliCS5.pdb

Imports

mscoree

_CorExeMain

Sections

%7%$
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ