gunzipped[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

gunzipped.exe
Size

1.1MB
MD5

6309701e6468db322923fe576f0924c3
SHA1

9c6bcf769ac995bb1ce7afff4e78399100e697c4
SHA256

e7b5f4612c7e7600ab7c50f390766323b7ae21b1c6c91333c6ed8d709bb54a44
SHA512

5e9318e6edfb86994b285a24ca489ce5afd5ec6e0a2dafd1c0a9d235c726331ab5d8ed0515c968894f0065a14d12691c401a6ba0370425ca9c47f1579dd20e68
SSDEEP

12288:XPWrDy9MUzRM/KJ2CUtAixjMhNXG5IRL2pPZtSVq5igx79W6+J:7fjhKJYWIRLcxlh

Score

N/A

Malware Config

Signatures

Files

gunzipped.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ