06293399[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06293399.exe
Size

258KB
MD5

c584f032b38ef026adf3ab72d81eb592
SHA1

08f9299176dc7d6cfb1a54e2d906d2a813de9b89
SHA256

e6d211fa3737e035c9805867eadab596b1f5920590a0e3107e6221251e1a0cac
SHA512

19b65b02c71f02aadbca322c3d85cc948871b6ad684dd618b0f7a1987ea51500a4b26b5132a614d2acfcb86f376b8e8be2c3f46ffa51c2e0c7d0351028e2ff42
SSDEEP

3072:PnY+lCqxA0R/Afk1n95ryyzP6whU440FdLs:FCK/As1n95rfPm440bL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06293399.exe

Files

06293399.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 242KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ