9f7bbe4b657f8a881b586469be5915b8e677b5a9bc111a5296e90030c7ed0ffe | Triage

Sharing

General

Target

9f7bbe4b657f8a881b586469be5915b8e677b5a9bc111a5296e90030c7ed0ffe
Size

895KB
MD5

8abb5d3382080c87931a5e34c256f990
SHA1

b8f99657ae329a4e299e649f16ed1f6004f73994
SHA256

9f7bbe4b657f8a881b586469be5915b8e677b5a9bc111a5296e90030c7ed0ffe
SHA512

c105a985e515718477fd7dc76f984d56a7d68798a443ad4dea2df94820756801f76ab81e1c5b9065be1493e783c7edb4bb4b4b861d6ddc2b7727a0e72b247414
SSDEEP

12288:HNT+fj05JDHmQaRyWrXOBV9q2Rd7LdUHnjbxS2Kl60/IAsTr:tejyZGQaIVqQRcZSJl60AAsf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
9f7bbe4b657f8a881b586469be5915b8e677b5a9bc111a5296e90030c7ed0ffe

Files

9f7bbe4b657f8a881b586469be5915b8e677b5a9bc111a5296e90030c7ed0ffe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Zafb.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 892KB - Virtual size: 891KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ