PRE ALERT 160-483389647[.]exe | Triage

Sharing

General

Target

PRE ALERT 160-483389647.exe
Size

709KB
MD5

4008b19ae9a71d19ac4e032720f34de4
SHA1

bfbdd6f7d96d29bb10b5151c982cfad2d10f3ccc
SHA256

ea3f69b9d5aebb683c12ff1014d62996dad0a81682e15386e838ac7d4120b430
SHA512

e46088d4c65f85076d4f73820b82ba4cf8218cce1aa2a48829189662510a9dfdd1f91f9377496cdefc4af2e0ae453f3d3e481df34879673443832f55b2992a27
SSDEEP

12288:qHkmFx2iqNhujGjU8b43kvq8TjPSDDMfdBK9FGKNj1QcGVJ6iZ4:qEmFxUm4MDibK9FjNj1QLy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PRE ALERT 160-483389647.exe

Files

PRE ALERT 160-483389647.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 701KB - Virtual size: 700KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ