78a49948453033607b17b96dc3a1b7822fde729025fb29ee50e7978fc287dd8e | Triage

Sharing

General

Target

78a49948453033607b17b96dc3a1b7822fde729025fb29ee50e7978fc287dd8e
Size

584KB
MD5

2b4f5187f245962863bc3fda32097626
SHA1

8087c1c0b1976668e8b48f822bcffebc68588db5
SHA256

78a49948453033607b17b96dc3a1b7822fde729025fb29ee50e7978fc287dd8e
SHA512

57f23087d859f68fcf64a004123b0861a1f9cb10fdbaf28e4c8eb64e6f335a2f68796dc70accf99d3ae29f4cea1371faa7dc4412e514f8efb17f96af5d20d321
SSDEEP

12288:bWgLSSp5irTnD5nSmZKJFQP3qLOtxoyQPZDAuUGkOEFE3FpIE5ZvBn/XmW:agOSSH5Sm7/qsKyQP1UdHFK0ENn/h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Contract.exe

Files

78a49948453033607b17b96dc3a1b7822fde729025fb29ee50e7978fc287dd8e
.zip
Contract.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 681KB - Virtual size: 681KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ