gunzipped[.]exe | Triage

Sharing

General

Target

gunzipped.exe
Size

808KB
MD5

f599d1548ca2d276023f8b6c868dec5c
SHA1

4ac6d7edbec9f62154b38e7b3a365c8570f95bc2
SHA256

0ef06a3a72f386e4e45322d50c656c356672dbfd0bdf2a9332c8705c47c8bf1d
SHA512

83da009dab5112173b7f8a445e7a79693521cf81072360aca30abe086316b7d9ac73d813823e97cd435b20f42281df1361a88b6f7aa0d18f2e8687af735f99d4
SSDEEP

12288:I1LpNaPn0YPX/N94+OCJO5pUCKthNekT1dkxzpF3nJd0FkB7UBFZdGMsu55qqq:bP0tB5pVge0QJqYIBPvbHqq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
gunzipped.exe

Files

gunzipped.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 792KB - Virtual size: 788KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ