1111_decrypt[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1111_decrypt.exe
Size

207KB
MD5

c706ad4e044de5c9be0a9aaf7c61e5ae
SHA1

024af69e21ff292872a0ab51d3ad221a78ebcf95
SHA256

5e94a74b1013c6e48790f3ca7129d1b48f819b69cb87db49a2e794e60e38eb03
SHA512

8084ffc71742249f2cca1bfbf794af796b6cb05368010fb93f506e387d17b82e763939eb9042995b85d55c345674371968fcf0f0798c11605206895afb25525e
SSDEEP

3072:xq3J49+GHLfVRaShM/tgu1tE7rGaNT2O5YQEesloexhFalh3ARrNr9N:xuiLfuFaG+j6

Score

1^/10

Malware Config

Signatures

Files

1111_decrypt.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 193KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ