194f2fcea5e7a2056112f479911bf768c494f8dd04702471f643dca95bae46fa | Triage

Sharing

General

Target

194f2fcea5e7a2056112f479911bf768c494f8dd04702471f643dca95bae46fa
Size

553KB
MD5

72daaf8dc38b44e3b6c6e1d9e0f31ff4
SHA1

0540f3f40e82442d914f1e271bc63ba5a7356f59
SHA256

194f2fcea5e7a2056112f479911bf768c494f8dd04702471f643dca95bae46fa
SHA512

4e28d3b3809634d8e26fd76146f8186a968c7cf2719924cde26eb2f0e7efd2e394c144be683d1d48760fb782148fd7362353f2e6a49a43f9706728e39efd7290
SSDEEP

12288:HrUSaiIHV46Bd17WSmxTnZ3G26m8zyzLFcTsA909LQQ1L:HLa54M1bGlGrTzyzhcT4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
194f2fcea5e7a2056112f479911bf768c494f8dd04702471f643dca95bae46fa

Files

194f2fcea5e7a2056112f479911bf768c494f8dd04702471f643dca95bae46fa
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

qdv.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 551KB - Virtual size: 550KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ