f762efaa3e352116c34152f01a8eb700 | Triage

Sharing

General

Target

f762efaa3e352116c34152f01a8eb700
Size

307KB
MD5

f762efaa3e352116c34152f01a8eb700
SHA1

f593a1794f7f52d9b2202b89d094a0d6f1d066d8
SHA256

a71bc1a9c73d95cfcada85c017b39e7d8b0aa6c8c80ef0410ab38a289a9871e1
SHA512

8db3a50233137f5b0a268bcd193f87f14bcc3ff18be2b45d1274b00a5a063d464a5ab9b53b57abd7a4fd8b2c1f88d7f87a47ad4feb2a6648a6f2d7af6021afe8
SSDEEP

6144:x1xoGInu4abaC/0kjjIGa/oHOcQKP2vZ/8586oehB5V8R5Dfz7q:x1xoGInu4Nl3/QjPq85RtB5WXDfzO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ff796cfa476a4dc68d5d01340d99ce2aa76add70ea69f751ca0fa48f4b03724f.exe

Files

f762efaa3e352116c34152f01a8eb700
.zip

Password: infected
ff796cfa476a4dc68d5d01340d99ce2aa76add70ea69f751ca0fa48f4b03724f.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

XPdriver.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 385KB - Virtual size: 384KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ