1929bf695c81cb4c4b39e05929f558907f532931b322b9e2d72f1aa7ffcf22e0 | Triage

Sharing

General

Target

1929bf695c81cb4c4b39e05929f558907f532931b322b9e2d72f1aa7ffcf22e0
Size

607KB
MD5

c77d7b80c1b61a649682b28b9daf062f
SHA1

15292367af2a8a7152cc0d3f9ca5b0fb254945d8
SHA256

1929bf695c81cb4c4b39e05929f558907f532931b322b9e2d72f1aa7ffcf22e0
SHA512

a9d4883e916bc2a3a976bc079b0a6a7e0348994e647e69b616c66858580b5a6cdafc12c4b37e4d74ff1239def0610369260b62562ebf46c2fe393ca163152258
SSDEEP

12288:yO8USvMEgLIVvX9I56tXHbYJY6XZ4SLagMHVzv3dxie6v4pb:1SvMrIVfjXHbYJDZagMHRvNxg4p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
1929bf695c81cb4c4b39e05929f558907f532931b322b9e2d72f1aa7ffcf22e0

Files

1929bf695c81cb4c4b39e05929f558907f532931b322b9e2d72f1aa7ffcf22e0
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Luk.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 605KB - Virtual size: 604KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ