wifhGGspFbnN0PD[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

wifhGGspFbnN0PD.exe
Size

850KB
MD5

b992bacb9f46d55f474be49d4fc588b6
SHA1

7cf639bbbb0aaaabe81754b4cfd456691e2848a1
SHA256

f51ac312a42b7ea58a385ce561b36ecb9cc5ccc5bbdc9bbf5aaadf7576b2c159
SHA512

d78040878c8952b12793ea288cc6a5bac1571db6a01e13b1a322c75fffe24f71147cd9be8794ac4c4e808c60b89cb53387f8f400f2e037752fe47cbc0ff2c400
SSDEEP

12288:rOq/oCJJk5lXU3Q2iNa4/f/TFAw2AfrwJKh/ZwZdBB6k0eDZdAtM:6n5lXU3Q153TFFffrVh/66k1A

Score

N/A

Malware Config

Signatures

Files

wifhGGspFbnN0PD.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 847KB - Virtual size: 847KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ