8b51e1c66c394812028ceeb8dba3c4d9ea76474ec55829de318353b0818e71e6 | Triage

Sharing

General

Target

8b51e1c66c394812028ceeb8dba3c4d9ea76474ec55829de318353b0818e71e6
Size

280KB
MD5

b485b58008975a5daae212fadc145f9c
SHA1

c12e8d4fa7faa87116fce3d7c7875f20e10bf9d4
SHA256

8b51e1c66c394812028ceeb8dba3c4d9ea76474ec55829de318353b0818e71e6
SHA512

39d8d21c2c1cc8a011fc675f17d9b30e9f703ad7c42750ff4341fb32852688d0250f5e62e6b91875530d1d5bb9d870ca0fe1b75951ee624e5e2add97b9862357
SSDEEP

6144:PY6jPEfIxrjvwd9Dhu1nbuPnFlzFeVuEqJa64BURVXR0Ah4eZXB2uUyR:PpjsBhwbuPFlzF0uEqCiHR0AB4uL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/697864448562120dd68a9b3a4c36f294292626999e3c80d3217206544e3f91b1

Files

8b51e1c66c394812028ceeb8dba3c4d9ea76474ec55829de318353b0818e71e6
.zip
697864448562120dd68a9b3a4c36f294292626999e3c80d3217206544e3f91b1
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

NHGGFuI.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 301KB - Virtual size: 301KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ