01958599[.]exe | Triage

Sharing

General

Target

01958599.exe
Size

716KB
MD5

971fcae02ecab66b5d8e9bf0603a8c75
SHA1

a1de4fe698673ff100bffed0fcba2db98e683567
SHA256

f9d49ba395212bc46444ac00546a04c8da9b251ce103adf52d9c80be61f6348c
SHA512

f94805781cb7df0ebf67af23d08a4ed7d47ffc4a0e54b8b55a8178241793c4bf4311f866b83c98866635b1ecb0a31101e7034d384e2d408595676bac925377cb
SSDEEP

12288:LBbmzZBEP85o4Y1yh9uxPuce1Dua0va/g2s8gJ7rUUUQo0JOAxQfl0yCByIQpD:09BEP8tvDB9YzTMc8CB5Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01958599.exe

Files

01958599.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 714KB - Virtual size: 713KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ