fb1087f5ae803f42c462f64d69e98d93fde21279c9f0be092c38c91caa20825fN | Triage

Sharing

General

Target

fb1087f5ae803f42c462f64d69e98d93fde21279c9f0be092c38c91caa20825fN
Size

733KB
MD5

4f2f75603b3e569aa58e271df79065a0
SHA1

72c2abd8b2fedb3a63ec239bf34d6ed722dbd8b3
SHA256

fb1087f5ae803f42c462f64d69e98d93fde21279c9f0be092c38c91caa20825f
SHA512

e32b9b4c75fb120c7111aa362e5d89e53ddfe2a0e427b9c7dc6afd1a9ef05274cceb73dfe668828a7aad071935fbb7b32a45709be6bec79a61f3275e5884764c
SSDEEP

12288:MDkhMOoltiJleHU6o8lRK4Eh3tkZPejDMSurQrks8ZtaENCA6RbBUwuOB:MDkh5oDiJle0D3tkwjAXBs8Z0SGRaw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb1087f5ae803f42c462f64d69e98d93fde21279c9f0be092c38c91caa20825fN

Files

fb1087f5ae803f42c462f64d69e98d93fde21279c9f0be092c38c91caa20825fN
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wZat.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 730KB - Virtual size: 729KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ