05338299[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05338299.exe
Size

761KB
MD5

15e7399aea87f41dcdc536b93452f3b6
SHA1

ab65c8a4d6f1ee3a36b29c42178fd1cd3e59d3d3
SHA256

8e42f5b252ac7d0ef6ab0985047472855d8bd76667bf62ca6f13d0a6c2cb6bdf
SHA512

d043b18983aa0e940443901fe366a203e29d7f57052048d43ddcc41a3a91eab1e11c431b0cfa20dfdcd92e2cca6511773b20113b452c67d2e3525c14891435a6
SSDEEP

6144:JzbGXY50DD9OGs84LP5j5pJJKbWYp3oSlzTPtVhb3W8gDsfii1tCVZS51SKiD+fE:F3gsF1HPgWab3WC1tGGSzD+fF4hRbe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05338299.exe

Files

05338299.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 758KB - Virtual size: 758KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ