1960af0490edb6211dd26430ef1c375dc708a25cff2bf9792b7fd2760184eb87N | Triage

Sharing

General

Target

1960af0490edb6211dd26430ef1c375dc708a25cff2bf9792b7fd2760184eb87N
Size

416KB
MD5

cb0d2b0ef0a02a1c2e18430edb08c5b0
SHA1

9b809bd44ba216096f8b1ea43a391044454129f1
SHA256

1960af0490edb6211dd26430ef1c375dc708a25cff2bf9792b7fd2760184eb87
SHA512

88ca7b2f63ff412a97614a2812387bb162350b2edc9e9869bfc27172629b88e5cd5dd1c3ceb05f0f0827c37422a189564ce8cacf79519c202b7ecf56a6f6cbb2
SSDEEP

6144:ITNE3ZRrnaBVlvphVxmP+6CiejgcME1cwYfU+va+RU7o:ITNYrnE3bm/CiejewY5vb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
1960af0490edb6211dd26430ef1c375dc708a25cff2bf9792b7fd2760184eb87N

Files

1960af0490edb6211dd26430ef1c375dc708a25cff2bf9792b7fd2760184eb87N
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 237KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1024B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ