pzO36WAwyMR56ke[.]exe | Triage

Sharing

General

Target

pzO36WAwyMR56ke.exe
Size

753KB
MD5

cca9d07fcd7ec5b17fd2148bcdebc1d1
SHA1

e70f1db59060a298e94e6378b35b4da0abb55cc6
SHA256

26474730cdcfe2ef57b7c1631bb5893d99d3f4f050deeae4509f480fd939c405
SHA512

6cf852f69322dbd285311c2a2750d68f091e6f93160ae8cc3f7db0af6a5e4fe27e5af7f54457bc7708a18181a36db6a201ab1b79dbbdf653aa9e2c237c7b8c7b
SSDEEP

12288:9d6L7PVUftimbhaDnLMzIL2q+RTdOL8rMCygayKjJNJcaiUeV9uB9aPDRrcdGirq:ZOyqGUL8rdMJ3VWyaP9rcbUF1wGuHu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
pzO36WAwyMR56ke.exe

Files

pzO36WAwyMR56ke.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 744KB - Virtual size: 744KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ