59494a51618f234021c0dae2d87667ce9e431b8a75a1b4952d3e48bf71492fbb | Triage

Sharing

General

Target

59494a51618f234021c0dae2d87667ce9e431b8a75a1b4952d3e48bf71492fbb
Size

2.1MB
MD5

8168481e7fcc45a8c01adc93985bf29c
SHA1

28e8c9bd9b0274ab5767e47c263d46b174e780d7
SHA256

59494a51618f234021c0dae2d87667ce9e431b8a75a1b4952d3e48bf71492fbb
SHA512

b241186b7de203b5ed910b6e3abda1cdbf1fd5a19a2f7d743fbc9906d71a1a4a429bffd1f37ceb6b976aa1069f5865bacd1ed32540d0af04633cc585317bba3f
SSDEEP

24576:tipf1GQCFmAQEjlvZpLcOq4aBgzGWTAB:SoFllVq4DzGWTAB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59494a51618f234021c0dae2d87667ce9e431b8a75a1b4952d3e48bf71492fbb

Files

59494a51618f234021c0dae2d87667ce9e431b8a75a1b4952d3e48bf71492fbb
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\workspace\WEx\Products\Installer\MySQL Installer - 1.6.3\StandardPlugins\obj\Release\StandardPlugins.pdb

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ