decoded-20221225154900[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

decoded-20221225154900.exe
Size

1.9MB
MD5

bb298a0832ed5dd6965d36d9ebe5ec5d
SHA1

dd175d7c6581998f71b01c15ed96be1cab74025c
SHA256

2416eef956b39e6a57f100b4b2d368da0e4d848d90924c2af068845c9c691e86
SHA512

2285fd4b39e77d2e5ef0a11aa47cea496c84533353a4b382ede139aa88e1129e4593c5e9bb6a81ff36fdea6f856552c6b379a7090119058c1079f27d0e4835e3
SSDEEP

49152:cLM/u06MpzeRsEsPvOamb/rXyPP7RBFM5gJsJECRgH+b:M0ncsEQvtAbeP7ajECRgc

Score

N/A

Malware Config

Signatures

Files

decoded-20221225154900.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 621KB - Virtual size: 620KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ