9191f5a9acd51585880fb47d8992aada6cfea3c7a9af9909cbd32eef49862acf | Triage

Sharing

General

Target

9191f5a9acd51585880fb47d8992aada6cfea3c7a9af9909cbd32eef49862acf
Size

656KB
MD5

20eab4da117b7ebad0bcff4d1ad652e5
SHA1

79255c5d759ae4c863baec1dfb14abe716f1c247
SHA256

9191f5a9acd51585880fb47d8992aada6cfea3c7a9af9909cbd32eef49862acf
SHA512

2b7e5829f20d992b5fd765bfcbb7d4a3b3902ef4bc595f0016fb016dd1d3977c2ac53c61fbd32219d59272d405352a34fb158cf56523a76f8979c77c7ea1ec47
SSDEEP

12288:eEAtK9wwc6omPlFvajBrXAWZFMZONdA8B2/7w6mIMQ5V2p4gZGj+oO/i:+tK9wwImP/+JAo2OY3ntj+o8i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NEW SIGNED CONTRACTS.exe

Files

9191f5a9acd51585880fb47d8992aada6cfea3c7a9af9909cbd32eef49862acf
.zip
NEW SIGNED CONTRACTS.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 709KB - Virtual size: 709KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ