M000206 $250,000[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

M000206 $250,000.exe
Size

852KB
MD5

12d4a404019d5ce076e6be0cdeae70fc
SHA1

11b2f70135bb1366b6112daad939440a152ad32c
SHA256

c0c6c61ded9403f961e7134723d6d2769cb614344a0bc40ec4d73a64e7d19105
SHA512

f284b26afeb9cb0a46a56aade0ae6e3cad0fa6c107a5bd458ebade3f0f0d10953ff3b8c51d22e8fa190c19e4d01a39fe24c9c88e0043d0c1e01b74e4684fd412
SSDEEP

24576:QLaLsRg9db30NOQA+/7lhQuZNVyS/D1FKYEn:AvZWM5F9s

Score

1^/10

Malware Config

Signatures

Files

M000206 $250,000.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 634KB - Virtual size: 633KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 217KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ