e5mvukHmGdh4pTY[.]exe | Triage

Sharing

General

Target

e5mvukHmGdh4pTY.exe
Size

582KB
MD5

d3d4a0b23a01d10a64b578559d29d2fb
SHA1

0a91ef4aa1eef664e14075416ed9b0213f44ad0f
SHA256

1b6074d75cc84fcd24ad401c5706b1b77c1ef133a479f92e43153cbd8a952929
SHA512

b2b0926473a0657b276da0af1d3f3a354dfe766b9d0bd4a40e933115c6a39349b6bb5fe36452482960c92079df2feae98cae9077f3a943e7e11a9a3f1f7b34aa
SSDEEP

12288:FRPWqex/R7wwFCDRPjQU/oL6Fu/225NS9/t9:bWqe/wrsUZF+C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e5mvukHmGdh4pTY.exe

Files

e5mvukHmGdh4pTY.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 565KB - Virtual size: 564KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ