dbf4d0b11a089aexeexeexeex[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbf4d0b11a089aexeexeexeex.exe
Size

952KB
MD5

dbf4d0b11a089ae712bc53f6549f38cc
SHA1

54178808319752fe7960b45f2ebc6c40c97d5a85
SHA256

dfe8e0df00f5308a7445780c5034dc6af5b35c21bbb63a9bb9a8e9e75f48f694
SHA512

7b2ead678e2f9e7aa65e0d5e0c8c1dd970c3a1c7ffef7141fccffd8fff27bb5fe6a94d77a1a1b2c51ace7dffececd165de327528f91b31de7670dff88614d204
SSDEEP

24576:bd8PXuaXa0thvjk1VTaDrnZ4dikIo9HqAvi:B8PDg1t0rnZ4dwy1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbf4d0b11a089aexeexeexeex.exe

Files

dbf4d0b11a089aexeexeexeex.exe
.exe windows x86

06fa29813db6c1f98441703604fe5cf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
ExitProcess

Sections

.text
Size: 574KB - Virtual size: 574KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ