SxiT40WAvUwfKxF[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SxiT40WAvUwfKxF.exe
Size

661KB
MD5

cdefe2f6e98e11a790dbf7e5f5c627d9
SHA1

b8930c3d6821375da085422e2cfbe0a30e1000c9
SHA256

ef23c59e01d4ead9ddaf93012c303e5eaf45cb469b2adb64e3e2f950edda0172
SHA512

e44fb5293a56f5253baa9cc3347f6f6ce3a218fdf2c1a11a511357c087392eecc328b951bcc41679a5eb64551f3a7ed70adc5477ecb3cfc1f2bbf755d2a03f51
SSDEEP

12288:2lU7tpVGMjBKY2Vi/0582aqZoWzZ4P5+x7yMgv:2U7dGuBhf2anoyR+EMg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SxiT40WAvUwfKxF.exe

Files

SxiT40WAvUwfKxF.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 659KB - Virtual size: 658KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ