05601599[.]exe | Triage

Sharing

General

Target

05601599.exe
Size

313KB
MD5

84f3c37fdb672384a0e08284eeff44e4
SHA1

f7cec096a35c5708c09698a64444b1fe81e73ee6
SHA256

f2e38262a1478bc7b3d91d0a780bdf62068be238e17c95d93928c32182dd70a4
SHA512

a66e1d34290d905f577e6fcce6c5c5f011b4691cc4a37971545033da4c5029ae140b19a7a502472c7f071dc690c9577a882b33c95bc89f5635ccd0f2f99349ce
SSDEEP

6144:D99jZMz/y1rekkCkVg+AW93YVfhZR3MM+SYRQlsQc0EJrQ7QJ:pXC/FkdkVg9WlufR3MM+PRQvcZE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05601599.exe

Files

05601599.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ