executable[.]3424[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

executable.3424.exe
Size

298KB
MD5

0633635245838db24ae8a34eeaa3d05d
SHA1

1d9e2edebb4044a336ac71121d0932a5527cdb78
SHA256

d1b433eb609cdea1e16e02d50b18dcba1ad446fa0d29b6b5b00849d3f3b2bef7
SHA512

d2dbc8f0aa3e615c0554d6946bb7849a4c6e0fdac9ab720e597605c830073c86c340478a3d87696462f1c2e24bce6fd10f0cfe11196defacfcbb15f4fd48ee14
SSDEEP

3072:QfM+lmsolAIrRuw+mqv9j1MWLQZmU+evU:j+lDAA/3O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
executable.3424.exe

Files

executable.3424.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 198KB - Virtual size: 198KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ