5e8cfae8c74f546024e9267537040349b266455f630f0fa756747143efc1083dN | Triage

Sharing

General

Target

5e8cfae8c74f546024e9267537040349b266455f630f0fa756747143efc1083dN
Size

582KB
MD5

7f5532422bc37e37aacead6b8af7bac0
SHA1

7b38714edc7146fe45ba7dafa0af6136f4c78cfe
SHA256

5e8cfae8c74f546024e9267537040349b266455f630f0fa756747143efc1083d
SHA512

ff0c35e981241f7331c0e8251000f3f11cb908d40732b7acf634bf63a3367330fc3049ce9e45e9523fd4276109a38c2e422e5b8020f3d1b8e4b1d78e28046671
SSDEEP

12288:U5f0fn6Qic+BlHjsZa9c+wHfHuOoGSprhtYU6l+tJz:CbX5LAUM/OJGKqU6l+tl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e8cfae8c74f546024e9267537040349b266455f630f0fa756747143efc1083dN

Files

5e8cfae8c74f546024e9267537040349b266455f630f0fa756747143efc1083dN
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wiok.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 580KB - Virtual size: 579KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ