gz3khWMGKg5ZSjN[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

gz3khWMGKg5ZSjN.exe
Size

526KB
MD5

021f8fe2b3553b82ccb1f6bd50a00177
SHA1

144712ebcf4896ffa949ad7152844373f19ff8c9
SHA256

afd8c936337691ea9b680f253002d428ca216c2056dcf3009ecb566f1e67395c
SHA512

d836fdf9eca9fb58e74451e9f1e019dfa1dcec0db335e68b9b008d61585bbe01c9d1636506758ebf1e8ebcd1d4a32097eec64bab17af11b04074374a66e63cf8
SSDEEP

12288:j8whh2Y4YpsRQkdgGvWA23VH7dZ/j54wlCphQUhH:j8whh2xRjoAYZJtjCwlCDvh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
gz3khWMGKg5ZSjN.exe

Files

gz3khWMGKg5ZSjN.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 524KB - Virtual size: 523KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ