3fAfnuxGoDeAwdi[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fAfnuxGoDeAwdi.exe
Size

529KB
MD5

b50f8ea574af40903352abe9787e3b11
SHA1

85c715d51483df6c51ff5a8445712eab7dd207c5
SHA256

a36433b56dc50860d79af87989e112df548cb8be8e47d26bfbe590735fc49260
SHA512

4d2786b59c5b9d06e776de62a34f7dd47fcff52e980ebf5f0cb92a449691a52b3ef70ec9b68f98f78b697dc952cf52ba05a99231f829f93174d6c643f8ff7bb2
SSDEEP

6144:vuKR2geL3C9QNRHXkxCI5rPBkwyFB/WKPsonMlCuWUZhLVNQOWz/C28d1Ll0hffq:QDMjxNQOWW2ffI8ZHsXsleuE8FTYdlU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fAfnuxGoDeAwdi.exe

Files

3fAfnuxGoDeAwdi.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 526KB - Virtual size: 526KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ