b9311758998b5ea517d97a07a4e66a2616ef9395eef50dae210f6246c7fe02ae | Triage

Sharing

General

Target

b9311758998b5ea517d97a07a4e66a2616ef9395eef50dae210f6246c7fe02ae
Size

588KB
MD5

a4fe63b591ffb3b6b68b616b642fa848
SHA1

dabbb3ea462ff52c9ae286bf787bcc2f28ce8c37
SHA256

b9311758998b5ea517d97a07a4e66a2616ef9395eef50dae210f6246c7fe02ae
SHA512

51ac0a9f46c474fd1abc29b305d5a29bc3317ff1869d0e1b2089d1cf427afec1e5b648db450b00f073ffb3bd468899f9069f591c9827cf959e2f325647eb8af5
SSDEEP

12288:PL0nsDn5N3MTOO8/oLOkJduN3AMVG7zfSH1UsAYHeW0upodH:PwnIMTOxgakDuN3nVgg1zVo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
b9311758998b5ea517d97a07a4e66a2616ef9395eef50dae210f6246c7fe02ae

Files

b9311758998b5ea517d97a07a4e66a2616ef9395eef50dae210f6246c7fe02ae
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

EwoH.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 586KB - Virtual size: 585KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ