1a160f421abe8ad85e35d23a549eead6f0501144d15cde0bb7d034508f4afbdf | Triage

Sharing

General

Target

1a160f421abe8ad85e35d23a549eead6f0501144d15cde0bb7d034508f4afbdf
Size

550KB
MD5

e5e9d51b5f91be52a390c1b9439ef847
SHA1

145ad60f37715d6d3825372ce3bc3d1dd126929c
SHA256

1a160f421abe8ad85e35d23a549eead6f0501144d15cde0bb7d034508f4afbdf
SHA512

8754c6728df498a0f613e402f1ffa9039fd9b819151c9efba0c620009a7dfbb569ff1379b37fb4dd08e99fad2276d015e308505c7ecb86c623ea4b345f488cf9
SSDEEP

12288:conaLQvFSWKwZ7BOPO1WToW5JoTAmTmCXgjI43vyGzQVwJzzB281Ee9i:c+tq8BlfWgAmTYjI4/Gwv6e9i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/KIrXf9zq5EAEJD6.exe

Files

1a160f421abe8ad85e35d23a549eead6f0501144d15cde0bb7d034508f4afbdf
.zip
KIrXf9zq5EAEJD6.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

CnBb.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 605KB - Virtual size: 604KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ