MV GOLDEN SCHULTE[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MV GOLDEN SCHULTE.exe
Size

713KB
MD5

a7d8b5319a545b81637c4c52e9a2a289
SHA1

c7cc54bb2647de0130d1484eba4e7bd09f083f75
SHA256

64cfb742accf0ccd0d20225f5c16688dda0aa93aa005157f02f0249bf3fe298e
SHA512

1a9bd6bf3ff368ad031dc95e7d3b6cb4af66f15608409013aca627220be66aaa75fba8fc177f232303dc909dbd7bc13c77fc9776f9a11c68c7cd857b09784bf9
SSDEEP

12288:Hd6L7PVMfuiLbhaDnLMzIL2q+RTdOL8SYBW+8RO+lIljhe4+PzAW0ANpy59:7OyqGUL8RBW+eyZhe4+8Y/y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MV GOLDEN SCHULTE.exe

Files

MV GOLDEN SCHULTE.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 704KB - Virtual size: 703KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ