ba79c050bb3eddbdd5e3da2c2a8ce8282296882964ca75843f8dc0c3ebb8b4ccN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba79c050bb3eddbdd5e3da2c2a8ce8282296882964ca75843f8dc0c3ebb8b4ccN
Size

90KB
MD5

2a456ff710d7a3b386e684fcbc655940
SHA1

40c1721085fbc1aa4c5f1124aec457e9596cac21
SHA256

ba79c050bb3eddbdd5e3da2c2a8ce8282296882964ca75843f8dc0c3ebb8b4cc
SHA512

22f5eda6e4a63c3e0fbd833af5a74f8732fcdae9b8ae6af97bbff603bbe1dff7ef2b6a1d5f3b48461c972e13489596e42e661ff253629d718f904fe6889317d3
SSDEEP

1536:UFsEAkkTAimCdGym0ED5EOCKKeUUWjOG5V4990OOOOOOOOOOOOOOOOOOOOOOOOOp:dEAkkTAildGyTED5vCKKeUUWjVnOOOO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba79c050bb3eddbdd5e3da2c2a8ce8282296882964ca75843f8dc0c3ebb8b4ccN

Files

ba79c050bb3eddbdd5e3da2c2a8ce8282296882964ca75843f8dc0c3ebb8b4ccN
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Granite.Integration.Web.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ