EHHpM[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

EHHpM.exe
Size

999KB
MD5

048f7be57b8f29f5c2a822ffb39c47a8
SHA1

57433e472b7db09796840a0e06dbd86f2658f82b
SHA256

d4459343e29d874370b293b40d06a50b3749351a2228847f7dfdc42703a242cf
SHA512

0ceebb4f102e1c6664f705dae39e337449f3a217aff7eed8ca2e1321703759fe146a72fdebc4d71888072d0c8dc798e24297040d243061f24a7da0d4fdd18f4a
SSDEEP

24576:rz+htGs0vYaj0DwyGKKJWd1tMmeZbeJBmLMpUi5ExT:mh/u0DKJs/G6BrrExT

Score

N/A

Malware Config

Signatures

Files

EHHpM.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 996KB - Virtual size: 995KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ