казани как нигске[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

казани как нигске.exe
Size

13.8MB
MD5

8ed8e5a25f3290fe6a7b62511c8b5a93
SHA1

f3c71532f02f31197057b16d23f5a3ed6d342c3c
SHA256

0375824fb794c1389d55f1819d74618d6e9cabf938fecf7aca2c161092fc0d76
SHA512

c58d71181061de930e8b9165e8f9521294d1781eb7fc954da88218613e1bc6d99cd9b1d61f10a6967ac15a7a150514ea8afd268d7904f247a76de80165af4820
SSDEEP

393216:EGy2xNrRw3IATrzNWpU88rwhVS6Jt7GmIq8r3o:Py2xvw3TTrZWL8S5t7GL9

Score

1^/10

Malware Config

Signatures

Files

казани как нигске.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13.8MB - Virtual size: 13.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ