5f18826cd701320b56933d7e9d43186601a69416838331d60b20f12a262e5dd7 | Triage

Sharing

General

Target

5f18826cd701320b56933d7e9d43186601a69416838331d60b20f12a262e5dd7
Size

2.2MB
MD5

06997ceb77cdac46e7aa0a2b3118d934
SHA1

0a2e22ca70689713ad5e8ff815961c3f0ff0ca10
SHA256

5f18826cd701320b56933d7e9d43186601a69416838331d60b20f12a262e5dd7
SHA512

856535375dc131b26abe76b208be28b3eeff228fa915a160fee66c87170a5acdb38105023f1b05763bded22080b9763085949abe05d6b072b7f35adca45801a1
SSDEEP

49152:ovLjxFr5Fqvwv9ptGBHHzWEIYhZDsxiWuoEVW0GTRCi:oXzFY4oVHJI6wxiWuonTb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

5f18826cd701320b56933d7e9d43186601a69416838331d60b20f12a262e5dd7

Files

5f18826cd701320b56933d7e9d43186601a69416838331d60b20f12a262e5dd7
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ