W5D16lwDILyMSLk[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

W5D16lwDILyMSLk.exe
Size

1.2MB
MD5

7ea75fbbd00a8ddd7dcab9eb89df2249
SHA1

ab9d5d30a90ded737cb1cccfc92f98ffbb67019d
SHA256

8b1a8511b64c30b2d369ec41436b9dce57f76dcf51b902506b601f9e48bb9adf
SHA512

f0af88c70335748ecf13a1048a50d1d4ca2b60784460663bfd6924971a8e59a045c4789a3a1621f3f140207fd26835752bca3f8f4b07dbd4e50247209439a9d5
SSDEEP

24576:RSpvCMhLuyyjcA+ofkK+B1dgttBp1HzmWOj:4bLuyyjcSv+BjetT1KWO

Score

N/A

Malware Config

Signatures

Files

W5D16lwDILyMSLk.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ