FACTURE PROFORMA GIZ DU 30 AU-2022-OCWAR-T[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FACTURE PROFORMA GIZ DU 30 AU-2022-OCWAR-T.exe
Size

637KB
MD5

9ab99c48c4658a5cb43e0227a55de1ad
SHA1

21804052a09be6483076ab81d17ff2a2042de2eb
SHA256

af15b91627b0f831d00118eaffd1ffc737b38a703c4045d436859d2bbafb9d63
SHA512

56eef80ad582c16fe88d101265a7add37232496950b2316829e17ba9d5526180826b50cf5894e2c9aa970b767e545c50bf1494bd529177ee8dec6883b2fa82c3
SSDEEP

12288:6fDlBgQeAnkclIfVfhc71I1W6cYcl9v4QjFMsZNSs86D6d:MDwQeAnN+R1W6cP7JjFMsZN26D6d

Score

N/A

Malware Config

Signatures

Files

FACTURE PROFORMA GIZ DU 30 AU-2022-OCWAR-T.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 634KB - Virtual size: 634KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ