SO GOSUSNH1637860[.]r12 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SO GOSUSNH1637860.r12
Size

560KB
MD5

83ebe24b198a9ddf5c5c93f89df324ab
SHA1

551c4f4f0583b785a0fa69b755bf2d0f23a5f9c2
SHA256

0c5e521ed50bf0f991335d7fe8f12e9ec047e4331773216e7be6984624e743eb
SHA512

7ee245e8266f8a049809a89af568ead9fb453623d40ffd606ba56e3a711d70530ba161392f53959088a98fe5669f78e54a6b12b18bb20c1856f344998f8f5f11
SSDEEP

12288:/L0LGVoTOzZouC5KM40eFzO9yrBfMrcAAG7LCqRwOK:/8GzGZgM44yrBfCcAZBwd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SO GOSUSNH1637860.exe

Files

SO GOSUSNH1637860.r12
.rar
SO GOSUSNH1637860.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 971KB - Virtual size: 971KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ