chiygf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

chiygf.exe
Size

777KB
MD5

5066e4ccacc27ef59f7a553d09a9d12f
SHA1

126cfe152c98fee39f8160e994ff67b829859a93
SHA256

53c3fbb133899ac4c292c39e3a30bccc15e2a5addfe15fefce472d1b810e0d07
SHA512

89294bf6097929698caa4151e8214f026971e17a1a2c78572cb1cebd0e6add31bf3708b8fafd45b4b54dd3a2144fe65c8361843dff214768180769f99b6869f8
SSDEEP

12288:jb30Nt8NiLXRb4qJ5QIfDCw4v9QJglmIPeTs060XA3nc71uE:jb30NWirfb0c7YE

Score

1^/10

Malware Config

Signatures

Files

chiygf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 765KB - Virtual size: 765KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ