FgDh5l8umXEzPzg[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FgDh5l8umXEzPzg.exe
Size

832KB
MD5

c8ab0372feca29ce45e979c94fa0c90e
SHA1

8456a465c3f92cebff8767d6f2cfe4b333d9caa9
SHA256

3483bcc8e4d439c0883bd94044e95f23c4b674c0472af8e695594e00bbbf9dbf
SHA512

5a54e09c20c901ba107339da1a2b457391cb6212a9505ee6def351a81ee5281f117083890262a0fdbfe85b364addf3a1ac2dfcf05a63cf577b1fe65ad4f09088
SSDEEP

12288:OYkv5pHjNDVVuYYDuABIVSpxJJEVAHHjkdRVu:QTjNDVzYSABIURJEoDkd7u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FgDh5l8umXEzPzg.exe

Files

FgDh5l8umXEzPzg.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 540KB - Virtual size: 540KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ