002820-930390202[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

002820-930390202.exe
Size

878KB
MD5

342d347ee5afb4c16fb543f80dfba65e
SHA1

b09d307b860b8eb3276127e42a6a8a7383106d1b
SHA256

af4ad10f654b460da90e68d1592f3cf396a1052b39bcdabd6f13b2f9a5891624
SHA512

fdd50632b66a5f8cc8e7e04afd031c2181df9016d23889dc0c980d7c0401f0f487f0771547caeb63b8f4d9267be8fe1496c4b17fd69a3119b02bedd34322a5ee
SSDEEP

24576:xt9dzMhnkV7U+hFJBwhWhdAoWXlb9LLbPJDh:x7ukVRhFJBVW9X

Score

1^/10

Malware Config

Signatures

Files

002820-930390202.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 876KB - Virtual size: 875KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ