HRPersonal[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HRPersonal.exe
Size

36.3MB
MD5

7d2b3f956bfbd9e2406aeabfb16d2879
SHA1

b6e5cb3701c1c69ea182aba191ba2c9cdd239032
SHA256

034b1f8e77c94402fb154859dd138b2ebacc573b84b5b0f791554bc4cb90ebf4
SHA512

7a6f2d4795c323fe1238516711146d362b2f0be1090106c49c862092b99c3598deb6efd4aea9c6aac5e9cda416a28fcea342bf54ee98d044fa9a40386e0e31c6
SSDEEP

393216:YENNvJqUow2owbAATnDTnFTV5jnYXtghFCdOUVn8MsR4mw7u7vUIP9dSSGTblxvH:YcvoUow2ow0ufFq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HRPersonal.exe

Files

HRPersonal.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 36.2MB - Virtual size: 36.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 145B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ