2b845ff4c5ee973861ccb905e73fed0bbd46ce5e311fc8910d188ec839226f58 | Triage

Sharing

General

Target

2b845ff4c5ee973861ccb905e73fed0bbd46ce5e311fc8910d188ec839226f58
Size

759KB
MD5

7578316e563e8a4a2983ae041a5fff39
SHA1

fa5a6777784f272b191803d03a49dfe40354bcf2
SHA256

2b845ff4c5ee973861ccb905e73fed0bbd46ce5e311fc8910d188ec839226f58
SHA512

225fa056dff9c59915fbfe593d3d336c133eeab6be80f48de976f8d14cd773bde21716f489b45c007310da6eb61c9bd6681a7ec0a80559b246af07a1346dc9ba
SSDEEP

12288:wQxqGZeM0K//AJPeewwEdg1+5u+p/GToqkWr5Ce5l4P09reMXrPRk:wYZJX4Peemfu+p/GTnkXe5l4P0peML

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b845ff4c5ee973861ccb905e73fed0bbd46ce5e311fc8910d188ec839226f58

Files

2b845ff4c5ee973861ccb905e73fed0bbd46ce5e311fc8910d188ec839226f58
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

xjWW.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 750KB - Virtual size: 749KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ