cfRAgzV[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfRAgzV.exe
Size

1.2MB
MD5

8c083e7baf4ac6fdb87322bfd1b4d147
SHA1

c21bb9ff7fab12d1d48e8d5156bef36edd8a914e
SHA256

8ee4f16356ec244db5276fd5f8e36057ab1012a5bdc565b9350ef1a6baaad40e
SHA512

6016495d9d3190c54ccc59140506ea6b9af3d3746db02cfa8125cd8c9677f81acaff666c9af79b8f9e67a39b077dc2616232655a77af0b26519a026f32cbb186
SSDEEP

12288:dZK2oFm3xCo4RKXNkoRh5c2iNaK/fWwoV8mnhQgi1PMftBX4dO6iJMK9lR3sCJEC:00wRqRh5c13O8IKgiufbX4dMJBlNlu3

Score

N/A

Malware Config

Signatures

Files

cfRAgzV.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ