b8c36a5967180f48ded58270e958e86bbb61594528ef061089eee709b1f3876dN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8c36a5967180f48ded58270e958e86bbb61594528ef061089eee709b1f3876dN
Size

2.1MB
MD5

2cc364b175e7ef7ce0c3219e8a2d6370
SHA1

8ff40617491c484061b2bd9871f84993beaa71f3
SHA256

b8c36a5967180f48ded58270e958e86bbb61594528ef061089eee709b1f3876d
SHA512

104c5c54760bd4f90c4af38a15498d94d6ccb695aec39d8b90e640f2039bd2e9cf2ad9d5897a857bb41eef401ce002c7a252a812420e88b6dc6afdf170fc722a
SSDEEP

49152:s1d+ydB3IqSoJdXN0BMOwLloBrughITeqb:sT+WCq5JdXN0B7+sieqb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8c36a5967180f48ded58270e958e86bbb61594528ef061089eee709b1f3876dN

Files

b8c36a5967180f48ded58270e958e86bbb61594528ef061089eee709b1f3876dN
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\dbs\el\oc\target\x86\ship\postc2r\x-none\cnfnot32.pdb

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 340B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ