b866225a8348792d9b34dfc23e2227b6b2e90a2e72ccf3f7035450654af37d09 | Triage

Sharing

General

Target

b866225a8348792d9b34dfc23e2227b6b2e90a2e72ccf3f7035450654af37d09
Size

664KB
MD5

929dd7b9549462775e7a6d165e56bab0
SHA1

b8b75ff3f7c0582c577cb2f6a06003adbc74bb53
SHA256

b866225a8348792d9b34dfc23e2227b6b2e90a2e72ccf3f7035450654af37d09
SHA512

63c18e7232a5cba7c3d39a66a0fa54839a8d7a11e2ec4b856a6b33f6b29d1f7d1bcf4b1e85ce4d2e2838275efbcb89f1a0ae0d706ce2fed4af9e2113a7cd55a2
SSDEEP

12288:cPVVA2+LcNinqR2TjP6pli4GkQ3+tLPdqpnG1YFu/KD+VZDzwHZy1SGjxtLk/tqj:UVVA77NjPe1GX3OLPdOoYk/W+VxGZy17

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/zEuzkJPHHV3KYua.exe

Files

b866225a8348792d9b34dfc23e2227b6b2e90a2e72ccf3f7035450654af37d09
.rar
zEuzkJPHHV3KYua.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

jflX.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 747KB - Virtual size: 747KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ