e1f91dd1eda7bceaffca238ec26a4226dc7ab8b37260d5dea2e5700f7a038970 | Triage

Sharing

General

Target

e1f91dd1eda7bceaffca238ec26a4226dc7ab8b37260d5dea2e5700f7a038970
Size

1.5MB
MD5

19d9a08825aa6caf9eb842eff80964cc
SHA1

e2d3e68847540e9911b5794d7f405e7e2306c4f7
SHA256

e1f91dd1eda7bceaffca238ec26a4226dc7ab8b37260d5dea2e5700f7a038970
SHA512

46cd84d8412d19baf1cd484fb9fd8de8ef32b67be5a9573a84d17df60e3ab5bde34cdefead852bd3840ca29610b252d940bbc5387022a90c6e7bbe5bdc2bb370
SSDEEP

24576:0NNUtQhWhtqDfDXQdy+N+gfQqRsgFlDRluQ70eJiVbWpR:EzhWhCXQFN+0IEuQgyiVK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1f91dd1eda7bceaffca238ec26a4226dc7ab8b37260d5dea2e5700f7a038970

Files

e1f91dd1eda7bceaffca238ec26a4226dc7ab8b37260d5dea2e5700f7a038970
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ