Malicious_709a99e0a3f0491bc8f09cee8220502e41c300a81b9eb998edf5b0a588062c4b[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Malicious_709a99e0a3f0491bc8f09cee8220502e41c300a81b9eb998edf5b0a588062c4b.exe
Size

64KB
MD5

ae8e233586b55e1e44487fdea2eb86ea
SHA1

9fb398ade44c34bf583629e31e276315f1d7449b
SHA256

709a99e0a3f0491bc8f09cee8220502e41c300a81b9eb998edf5b0a588062c4b
SHA512

64a70e7cb996fff0d7b83c131e55e8db3d1d815c6af9b1a65ffff2e3ec188a008202abbcc87bd0af0d8b6ee5d853bf23bd26d67e750e2c4fd2cb26940d30e28d
SSDEEP

1536:roBHSfku/TguqNKM6C6E+YUv3EXmYOiKsU:roBS8Q0R68Xys

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Malicious_709a99e0a3f0491bc8f09cee8220502e41c300a81b9eb998edf5b0a588062c4b.exe

Files

Malicious_709a99e0a3f0491bc8f09cee8220502e41c300a81b9eb998edf5b0a588062c4b.exe
.dll regsvr32 windows x64

0fea243ddb12b477b6b4ab25be7279d0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrlenA

Exports

Exports

DllRegisterServer

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ