9c28e36405c311ffb063f1afa6f478d18923101078d042d3bfc6148475b34969 | Triage

Sharing

General

Target

9c28e36405c311ffb063f1afa6f478d18923101078d042d3bfc6148475b34969
Size

998KB
MD5

be9d3be706b969e50ed34ee2de1d0211
SHA1

bfb87c1fab93ec80c0cd56620f447fa00e59a47a
SHA256

9c28e36405c311ffb063f1afa6f478d18923101078d042d3bfc6148475b34969
SHA512

33dd0b89b784026b25d111fdf067d623cef07f00b6eba0e456cdfa9c59b2cb3134dacead18f6cec253ec393c6ddda8d8b8911edba1a3dd91541a88358d3f3875
SSDEEP

24576:RoUQcYoPrA5P1hsPZc85fBHPQpGir7ubrBojoFaO2jqhpuOmq:r41YiYZEnqrnr2jqvu8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c28e36405c311ffb063f1afa6f478d18923101078d042d3bfc6148475b34969

Files

9c28e36405c311ffb063f1afa6f478d18923101078d042d3bfc6148475b34969
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

CkUs.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 995KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ