TGHQ000800000[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TGHQ000800000.exe
Size

241KB
MD5

194b506fbf82fe9b77deb5c19fb55328
SHA1

bbbff08a317a03ac157debb3a27993de72538542
SHA256

e45030071efb40774095252901b94b14010a11daad0c3009e3bfe5a01c2fb869
SHA512

0d86bbb053d9d5850610a3696aeac55be0ce604fa2bf7331ddaa2ed8d83a9f9e37df758b1e7cd7f899778da851fac589637351eddd07d5f18395fb7d97d84ffb
SSDEEP

3072:SKuBCFu2f+kKA+YpqkRY5QLzFk/ZPBr4zISCCPhrSHQQbTuzf6XC+iNRK+MY:sBsL+mzqkRY5QLZk/ZPJ4zOwQQbK+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TGHQ000800000.exe

Files

TGHQ000800000.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 238KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ