Ydfhvdwolyu[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Ydfhvdwolyu.exe
Size

6KB
MD5

7d9f8da2fa18478e2d97c157d0f2e747
SHA1

881247ac1acc18c6a5d5f688fb6530a650644b44
SHA256

1d8026ad409084260f2dae852d0f179766b5c59e32f892e97d04b3c6cfda392a
SHA512

362ec4de65eb0ca9ae96f4ca7f085809d72a1d775b43ddc4f455b90d2f5fd2795bda58f927d694cfaf0c429181da238195ca8292bde311d2306349c8cc990cf4
SSDEEP

96:utBuJqkf0X8bhUI5LN1/pl2tAkljUzNt:uvuJB02hjLr/e/he

Score

1^/10

Malware Config

Signatures

Files

Ydfhvdwolyu.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ