05132399[.]exe | Triage

Sharing

General

Target

05132399.exe
Size

685KB
MD5

ecd8a614ab1c41e839a815f863bcddb4
SHA1

27862f25dec9d41f42428dc4c93d84ccb4c84031
SHA256

813ee787efe7691b84a7286dfb567f0f6f377f3ac0f0d2dc200e106df9f8f222
SHA512

cd66c2e49fb6fcabcaa20963e20f87a5358e057fb3ed519d0b960320300e8efe74863c675d2bb43ba0a78bb010a8c67fe716a8461e4f390911b97d8c49915644
SSDEEP

12288:KWEP/SJaTdiSl0YnaKp4YY8mAtoEvVa5LGnCHTblEfzXYIKkJ:i/4dIPaKGYY8mAvvYAWTSfDYIx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05132399.exe

Files

05132399.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 682KB - Virtual size: 682KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ