$689K[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

$689K.exe
Size

1.3MB
MD5

da00c54059ce9e0de3b9e98394972ccb
SHA1

e7687a7452ebaafb1d1215e4c2f8025e36a9553c
SHA256

eb1d120d17de4f838501615bf540c33099d241dcea9fe894935cbf0c092ae99a
SHA512

a00adfcfd4ffbab81b283f9ffa3532f7527d5a835681ad58c3657b302650980ad4ca64648b4316c99b1ed3a5328d55d260368657dd5e050f2be50dbc1e267775
SSDEEP

12288:goDe8wMbdjTMkRqsCnpVfWKXHDute0vmiiQmuETK8GCr7Q6rSVeNW4EwrNyhb+bt:NBnyLuaTK9E7QhVe/y2iGOakdiI9g

Score

N/A

Malware Config

Signatures

Files

$689K.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ