99e9a78e9273425218ba2f13341f35d355fc557e5ae08caa199ee060af43e1b1 | Triage

Sharing

General

Target

99e9a78e9273425218ba2f13341f35d355fc557e5ae08caa199ee060af43e1b1
Size

784KB
MD5

a8751e8b102b8c302567e97f7a7e38b2
SHA1

7cccc70baeb00dc525ca04283bd316bbd6882f5c
SHA256

99e9a78e9273425218ba2f13341f35d355fc557e5ae08caa199ee060af43e1b1
SHA512

c7426d2f825209c181eff884a6567a90cc06ba2e89291defdc4b016b1683bc9a6500e95cee3dc60229a9665f07fc1d9e802671f65b693c0ef251059c6ea99d6a
SSDEEP

24576:5rMpzxW+C+1EZ8ZrXEhXDjedw3ngAtOdZ:+W5IE/IGtOd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
99e9a78e9273425218ba2f13341f35d355fc557e5ae08caa199ee060af43e1b1

Files

99e9a78e9273425218ba2f13341f35d355fc557e5ae08caa199ee060af43e1b1
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

iGSv.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 782KB - Virtual size: 781KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ