64d09f36ee04a36d13b884c892e426109512270a003c3509c33066cf7349c56a | Triage

Sharing

General

Target

64d09f36ee04a36d13b884c892e426109512270a003c3509c33066cf7349c56a
Size

595KB
MD5

3b160a3db7b8761984be21ae2f936ab2
SHA1

41bb93bd501c3d5ad76de80a8514abc9dc669496
SHA256

64d09f36ee04a36d13b884c892e426109512270a003c3509c33066cf7349c56a
SHA512

f36327946f917d719b86a1056601379e79e3676f217414afc185e4466412d8913c6e8544e189671dd25fd35fcec98ab4e23ebda6503d80bc8f4fcc92d179036c
SSDEEP

12288:lfAMXkhMOoltiJ70CWYa/GbGfN8ft7Vwijd3kNTj7gLHQ/vQpWCajTD8:Lkh5oDiJ7+iGfNZfGcKa/D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64d09f36ee04a36d13b884c892e426109512270a003c3509c33066cf7349c56a

Files

64d09f36ee04a36d13b884c892e426109512270a003c3509c33066cf7349c56a
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

BQjw.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 518KB - Virtual size: 518KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ