CSOT_T5_Cluster_PVD1[.]0[.]5_0110[.]xxx | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CSOT_T5_Cluster_PVD1.0.5_0110.xxx
Size

445KB
MD5

f1d86f18618ec00899585615952c8012
SHA1

9e7340d0dde8faf21890b10a7829ae6a2adb059e
SHA256

5df06f05e80269612ff8c49f5420c797dd20b9562e6e2673bf6faf7ad3d09702
SHA512

dcff55a0ce55f43930c7652b144c89a4419af4294ab89697b3be69d3f97a41e5f91ae81c59deddaaff3b1f06f6efb91ede02c9a1d47d2860aa1c3fac01b64d1e
SSDEEP

6144:ayyEvnwMQdzEdM0vWHXtxQyGojcPydRwCQkOTK+9lTDgKKocFojmKgEcDyX:nn1Q5EdXvsOrKElua

Score

1^/10

Malware Config

Signatures

Files

CSOT_T5_Cluster_PVD1.0.5_0110.xxx
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 441KB - Virtual size: 440KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ