ef12fa9eaa16d4af16679bc922ca6d89c17b8d939de4be69292948167f33e3c8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef12fa9eaa16d4af16679bc922ca6d89c17b8d939de4be69292948167f33e3c8
Size

694KB
MD5

816ac05ef4d52afbf63ac619619ec269
SHA1

d32cee1eb41b5dd5f821404e579b9f8365448cc8
SHA256

ef12fa9eaa16d4af16679bc922ca6d89c17b8d939de4be69292948167f33e3c8
SHA512

91dbb3a8ff11086f327f2015eb0f3781afc010980553bc18f5a7ee34e92ff4ecde4899ecc04f549917cb7204b5933194aa29befc27694260e3cd82e966df1157
SSDEEP

12288:hxfAD9ay/wmwZlJerI2blwVaL6tCEjnY3EujO3ajjkmPy8iophR9P5MUyN0qR8JY:j4D8y//w2blwoaCSwTaqDlhR9P5M95W+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/dKjwfPSajBa4uDZ.exe

Files

ef12fa9eaa16d4af16679bc922ca6d89c17b8d939de4be69292948167f33e3c8
.rar
dKjwfPSajBa4uDZ.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

BjKm.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 808KB - Virtual size: 808KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ