419929cb29132d4442411144a0836daebe9eddcb9498c583197479a728aac18f | Triage

Sharing

General

Target

419929cb29132d4442411144a0836daebe9eddcb9498c583197479a728aac18f
Size

556KB
MD5

632fcbfdd3e602712905071c5a178e6d
SHA1

350fd5a29c11bf2244f94465ed2e82ce71a72ca4
SHA256

419929cb29132d4442411144a0836daebe9eddcb9498c583197479a728aac18f
SHA512

b0ea0cba1a9e6e5398e363d2558f0105288b48af2fa40678ce416bd07b2a021427c85af487734288f9e5a9185a1faeb3f2e67ae1a199e9686069333a07458ab4
SSDEEP

12288:ndBhrOiY7fNzGxb2w0T1Qhg8HM+M71ao7DVxZNywjzS:ndulzGow0ihhM71aYj3TS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
419929cb29132d4442411144a0836daebe9eddcb9498c583197479a728aac18f

Files

419929cb29132d4442411144a0836daebe9eddcb9498c583197479a728aac18f
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

kziq.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 551KB - Virtual size: 551KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ