7c111d261fc238cd8e97529ee1c157845917de24d5e1c182f8b6d78d76fb1dda | Triage

Sharing

General

Target

7c111d261fc238cd8e97529ee1c157845917de24d5e1c182f8b6d78d76fb1dda
Size

672KB
MD5

a472b4440c42e314aeef2b8e29eb99c9
SHA1

2559cb8dd5bccbcfdc8343d706074739ade8e192
SHA256

7c111d261fc238cd8e97529ee1c157845917de24d5e1c182f8b6d78d76fb1dda
SHA512

6d84df19c74815bb118906877c04a0ad37c9d21ec69cae61ab0d5e76aad51474950c07d4695c50e57dda7b0ef465cc9d1b973766a9e7768540a2574a8cf15e31
SSDEEP

6144:JbKMEj/ATrzIlhfWJoyP7XixeTKabNV+eieSjJuUHLwebJetfXXXXXXAC1:hKCr4Wb7XWeear+eieNUad1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c111d261fc238cd8e97529ee1c157845917de24d5e1c182f8b6d78d76fb1dda

Files

7c111d261fc238cd8e97529ee1c157845917de24d5e1c182f8b6d78d76fb1dda
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\dbs\el\omr\Target\x64\ship\postc2r\x-none\onenotem.pdb

Sections

.text
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 303KB - Virtual size: 303KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 436B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ