dollzx[.]exe | Triage

Sharing

General

Target

dollzx.exe
Size

696KB
MD5

5c561f61a184851db6df9fc71a83b98a
SHA1

37f35cbe6e32fa1db4df8cd2ba523edf05795deb
SHA256

8b2a9586bcf26045ba196d4714d8c628feb5d8eed4604ff82c6e3625b67a9437
SHA512

3f010b8e68d1e5c8f7201a4c2233bd36ddcf5299d56cd670f06bff9d485597dff7b93b4b467ee570940041e4737c631ef2f8689e256f62ccbd6b49e7e04d38f9
SSDEEP

12288:scj6T4Wg0tfComaiEkDoxx7UorpMRlr46Nwa+e:5UZvNC/yxx7UeOlE6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dollzx.exe

Files

dollzx.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 688KB - Virtual size: 688KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ