b4b1190488e0f01ff50a15ad50accb379b10185db252dacf592c86df5ab55b25 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4b1190488e0f01ff50a15ad50accb379b10185db252dacf592c86df5ab55b25
Size

2.7MB
MD5

cd0dd6d8c262359eb1072ddcac9e0e09
SHA1

8d823c64b00a34fe4cffe62aca4201462592f49c
SHA256

b4b1190488e0f01ff50a15ad50accb379b10185db252dacf592c86df5ab55b25
SHA512

f74b7db3ea99073b4925367f719a6cf9c53ba884ded21102a320cbf555964052955a0e634d9c1df795e3aef5b3fe2c6c4b72ddb0cb11d9a6b3498c300b3cb0aa
SSDEEP

49152:9fyT+P66XbOP/ZzA2DItg1Hoaz6wecYfFkURwlhyAuLjf/IVgs5+xP:QTE66yXZ02DwUHoazRofxIhELjf/IVgs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4b1190488e0f01ff50a15ad50accb379b10185db252dacf592c86df5ab55b25

Files

b4b1190488e0f01ff50a15ad50accb379b10185db252dacf592c86df5ab55b25
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ