Zaplatajpeg[.]exe | Triage

Sharing

General

Target

Zaplatajpeg.exe
Size

641KB
MD5

29d93426bcbc72ce27f1ce4b01ca7408
SHA1

17df6956b7f76955a4e7dfe707a021ad9da6af83
SHA256

7149bce0cf55829579b5e141f8c270f9d9c6f152e37a02695f64f5d6adfa4381
SHA512

38d8037909493763b40ff463958fdf79c98f210ba041f6fa93fd4288b6b69013f335a7488ebbacb9f646f19b25100a9ea5456b5b137c17fd0e373b4c4a881c35
SSDEEP

12288:ps9cTwVF1yb4Xh3695N7S0/gwBfD2rDYUifkRHSTXdm:pIFTQVuIYrDS8RHSz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Zaplatajpeg.exe

Files

Zaplatajpeg.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 632KB - Virtual size: 632KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ