Q213345788[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Q213345788.exe
Size

659KB
MD5

49efdea03a2e26a3b13cd6e62a6760ec
SHA1

2f4cb650df7e8a0643ab58b95345f11c7d6bbe4c
SHA256

67c073d1621a49c3cdf63410b8bf159b02ae6a8fc7738f4a9dda27638d40c43c
SHA512

ff3fac09c3165f4cfb1f9824eeca4ab20e951f34aaea4c1dcb2d6c4a5c460b806ca83cd178a0fbde3abe379ad1adfcb6466a6c7b497dfdc510c1546bb7235359
SSDEEP

12288:mG+aRuKskHMH91DzZvVMETfieUBOho3QKQXSnzy0mx4M3odkTDAKBwoL:mGzRjHMd1DtvhTFUohCQSzJDoHDXF

Score

1^/10

Malware Config

Signatures

Files

Q213345788.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 652KB - Virtual size: 651KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ