311d53da024fa3exeexeexeex[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

311d53da024fa3exeexeexeex.exe
Size

977KB
MD5

311d53da024fa3ef1cb678f69a297d79
SHA1

fd3b054bf0cbef07d3821498d5d2d2cd1e7146e4
SHA256

4acd3a4023f11f2a8450dcc8cc8ba304b874e7e69d2e05e2d199c78ae2d7de51
SHA512

c2835bfde96dec7cc8ed360dd69eb19d5b2ca773315b7e6da84bcf96dbb4bffbb04a961577d16f700eea84bbfdf3d6ae99c51cd9381e8d050968e19fa96d7f35
SSDEEP

24576:OWjlKSFlYiG5F/hEopaW4+E4gFZEpO2asq3m:OWjlVBIQo8L4gFwhq2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
311d53da024fa3exeexeexeex.exe

Files

311d53da024fa3exeexeexeex.exe
.exe windows x86

06fa29813db6c1f98441703604fe5cf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
ExitProcess

Sections

.text
Size: 588KB - Virtual size: 587KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ