Zaplata,jpg[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Zaplata,jpg.exe
Size

561KB
MD5

6f9e931132ed53e111a1d022395a5b7d
SHA1

aba94805466d7a2ae0f5be485d3f9930430e1f4b
SHA256

c5425d62c01551e1c243ed453bf14d0b51ad7e890d59ef469c5b9418bb6361a0
SHA512

45c40fd55594f99bd120f5f150f9dca8e59147f8407d5270464d122a7aa7385d42dcfde721fa931ad7b9cc32ce076e3e037d14bfda7e8149375dfa8b1d1f0c0b
SSDEEP

12288:OuFFZ6BKGu3ZAJ7ECGVEJIhlu4gvSD3tYE/B:76BKGW+EV+/4bYE/

Score

1^/10

Malware Config

Signatures

Files

Zaplata,jpg.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 550KB - Virtual size: 549KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ