Drp7[.]YS_I3[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Drp7.YS_I3.exe
Size

211KB
MD5

bb55cfb0dd0601c23992fddf138f93aa
SHA1

d88df72f8ee55c5241a01487185ef6a1a669894e
SHA256

47f4b5b6138ac3268234cb807982a6caa0a7505f9344cdf53714bc66e1f33982
SHA512

7d473d3d729d45ce740101d951d8b661bde5a4b65f41cedb21a06eb12bbd63a2673974015e5c12e27a2600d32e14960ffa829c941efa32952638262fa040d858
SSDEEP

6144:BY0EZ1rN1n3wh01enKsjARgMPxRVVnqhxRMG:p01ZxwhFnKs3q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Drp7.YS_I3.exe

Files

Drp7.YS_I3.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 157KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ