4143ec248589124b2f5370155c222176fae5d8acaf2588c6d7ecde9d285df702 | Triage

Sharing

General

Target

4143ec248589124b2f5370155c222176fae5d8acaf2588c6d7ecde9d285df702
Size

513KB
MD5

cc9fb4b29b4f58be085fe5dcd84b2013
SHA1

3afd78508a772c8c074371c4506520270a8dccb7
SHA256

4143ec248589124b2f5370155c222176fae5d8acaf2588c6d7ecde9d285df702
SHA512

c4a9728e4188a4080958654ddc6f567fd0045b32914e27d6ce643a9b679953673ac6bc9aaf48e3418590be6f5bbeeda6c82f567c6bdf50e7a7dd1f8082b30629
SSDEEP

12288:Wz4VIt8LFmbgVw729R/OddvURe15AfOK:9VM8ZV5f09c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
4143ec248589124b2f5370155c222176fae5d8acaf2588c6d7ecde9d285df702

Files

4143ec248589124b2f5370155c222176fae5d8acaf2588c6d7ecde9d285df702
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 493KB - Virtual size: 493KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ