gunzipped[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

gunzipped.exe
Size

84KB
MD5

635046bf733efb00bcf34da44579790e
SHA1

8626f24daf6b33387d2af482408ee00c298c1a88
SHA256

e60c177ef8c1330e33cc94726ec2e379d2d81504826c4a625cf55392e966b1e3
SHA512

1cfec86dc27c3469cf00c9853272d24689ae10b42491153117237bc599faa59849beb6073634517358e0e77ef7d13ab39122c8ecc148249a23267a0c25df9702
SSDEEP

1536:6j/GltpkqcA2FiZS0MkWi/B4dIRY7flIY55un+QImCMiD9m+6:6/UEqcA2FMMkW3flIA5un+QImCMiQ+6

Score

1^/10

Malware Config

Signatures

Files

gunzipped.exe
.exe windows x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ