05239899[.]exe | Triage

Sharing

General

Target

05239899.exe
Size

214KB
MD5

b879f7402a194cb5417ada48b9b86bc4
SHA1

3eee3751841f96762a8af3e864b174fbcc268178
SHA256

dc64a3564e8baadd892ff6bb6771e0bec18fd3fc5a51799bd51903b4d1a446ef
SHA512

a5ea6839633b3ec1f18e7840e512b14a47e76f589a0174d552d5d2f4cdf2ba027fa00a1558711ada1afdb5f570a74aea810dba71b632ba5a61f6bbb3bbe0e015
SSDEEP

3072:8e0ubbbbbbbbbbbbbbbbbbbbbbbbbCzIlbntcNaNBNCNpNqNRNSN5N6NhNiNJNKg:C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05239899.exe

Files

05239899.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ