yjdirscan[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

yjdirscan.exe
Size

1.6MB
MD5

cd985c5ed244580dc0ff689b6776d705
SHA1

d280fa12ab5e3dd7fc303a2874a1aab2c59e3729
SHA256

c3c2f462e7b76b908259e5f1457a93086a8a2e922b4154d9022bdfdb843f729f
SHA512

41a5c2dee72fbd5a8b41c350741547c1cd1f1a340fdf6ec73997b2932df40e343f15cfaff865b793037597d4a2853a736ad15d3430c8e01bda512b6674ed6979
SSDEEP

49152:h78vUg6NhVIfP/A2XSuNOU/n7+v3EfAnGf1Z:t8jmhSfaOnqsfVT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
yjdirscan.exe

Files

yjdirscan.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ