244d6e696188ffexeexeexeex[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

244d6e696188ffexeexeexeex.exe
Size

951KB
MD5

244d6e696188ffaa455447c6ca3f40fa
SHA1

66480b0c5a380d21aba250592693bda63daab07d
SHA256

22a049ee67cf82630534a6a28c9eafa6e142d363b62248dbfe7c73bf0c310d7f
SHA512

d4af78740b85def2a208710c99bdf3fd601120a471aefe3b040eab8a4f7be338375b0fb6a35efdd78dbacf937587ff4100befdb09c5478fc21b5bb028fce3778
SSDEEP

24576:tHbJlf+jFURa7NQh2GEkVStTA4khmo9NiioBC:BJjSGbotk4kYyg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
244d6e696188ffexeexeexeex.exe

Files

244d6e696188ffexeexeexeex.exe
.exe windows x86

06fa29813db6c1f98441703604fe5cf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
ExitProcess

Sections

.text
Size: 574KB - Virtual size: 574KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ