04797_AL[.]EXE[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04797_AL.EXE.exe
Size

837KB
MD5

8215fb520e6fd4cdd51e1c63c8d0fd38
SHA1

24e1a669e01e63071d425539b2aac4207a4a7f69
SHA256

3f0c02a6aba9a637ccbc0e9f3ba35e50ef50d89827d804c163a77fa4e027b583
SHA512

7617967d82beb8926fae25236f6c5f0921b5197e8be843740201e51850124c5b8944062778b96a3af59ff588337fd9a61a79118ee39e86bf65eba8d521423b00
SSDEEP

12288:EXKjX+rzknTP8pO4G0OIecssiQz34O0t3MxzfWAAIO6:OKL+roEpThzzIO0t34rWAd

Score

1^/10

Malware Config

Signatures

Files

04797_AL.EXE.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 832KB - Virtual size: 831KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ