denominations and breakdown[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

denominations and breakdown.exe
Size

571KB
MD5

03288281d694f1dd4aeaed2570637ff0
SHA1

89f050e00288e7037bc16da667bbf4df5632965d
SHA256

d3e989f804393e78ea6dbbd695be438350b450745df755f72139ab2d5c0c516e
SHA512

6b5487f696b8f153c61781267a80a6466acb03b891c944e29ce7f4f699f11e8367e0155235b449b4fdd6e235c218b139724bf87f51c73e98c611f64c8a4f6889
SSDEEP

12288:yBqD3ZxjJE8ERFtwuQhijnMX9vpd+X9RoajBRWidmQik/QqxJyCB/:yoLZxj6XFtkhwnMX/d896ajBRqeQoyCB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
denominations and breakdown.exe

Files

denominations and breakdown.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 564KB - Virtual size: 563KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ