9sswk46HPbdVEnu[.]exe | Triage

Sharing

General

Target

9sswk46HPbdVEnu.exe
Size

663KB
MD5

b738ea048deaa090c4d39c208b857ace
SHA1

b609424ed95bdb7514e479438c57b20725c4b461
SHA256

0f79d5a95f0a777647c8f37dac2111cc426b2a3da30d7edaced49e980e0910a6
SHA512

c5a577bf2f71b6fc1ca0d3d182c2274432216da13d8efdcfd57e0a9c3d40fe37f779c75b0279b08412e75f77e6179a19af29c58ef3011a3ec624b1b0de025f96
SSDEEP

12288:ZqBokq6Yhn4hrhTyLU9x7ExpFORkyspPWmk3aTa1XdU:Zqtq6q4hrtXxwvFORkXVk3aT4tU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9sswk46HPbdVEnu.exe

Files

9sswk46HPbdVEnu.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 646KB - Virtual size: 645KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ