5b41291f73a514e0f2e432f4cf3345d5288af613c04b1c7549cd7d30c6d96a67 | Triage

Sharing

General

Target

5b41291f73a514e0f2e432f4cf3345d5288af613c04b1c7549cd7d30c6d96a67
Size

282KB
MD5

ae05ab72d8dbb35a8b17af6681139515
SHA1

76619f7e9ff8c13ad4ceb0d2f694eff58941e34c
SHA256

5b41291f73a514e0f2e432f4cf3345d5288af613c04b1c7549cd7d30c6d96a67
SHA512

06f9e06e5a953b36a8d6706d788e931ae7117ba5075da984b52209113350434f026a68197e9acfa98a96991092f82f4a0d242f7f0a6d3a3d13561e73564b45db
SSDEEP

6144:boy5p178U0MURaGyNXYWQzHazRfXrwSRnWwhrQ66fKkfc:boSeGUA5YZazpXUmZhZ6SV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b41291f73a514e0f2e432f4cf3345d5288af613c04b1c7549cd7d30c6d96a67

Files

5b41291f73a514e0f2e432f4cf3345d5288af613c04b1c7549cd7d30c6d96a67
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 238KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ