gunzipped[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

gunzipped.exe
Size

306KB
MD5

a979a2fc9d07b3ccec01ec899b505456
SHA1

339d050fa595ba94f67b2f9e22e46acd87d16fa7
SHA256

39962d783ceca0f8d0250660179c45b22e74097cf20eacb5464342fbcfcac61a
SHA512

2fc54b1f1bb07ce659a23e61dbe776722438cfa47849f71872e158e69e56df0bb0398ae268f0c78ed2338dca26b305282c93940bd59ec17faf1010da8a40c092
SSDEEP

6144:G8eArwo8dTKKN6mB4i56O3yzojRyd1id:Lprwo80KImSiA/zM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
gunzipped.exe

Files

gunzipped.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 280KB - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ