INV00938773737[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

INV00938773737.exe
Size

620KB
MD5

7ce615dbbbc95207c8b713ffc4bcf334
SHA1

b57506ece7d00cb5757af6bdea4cf6ca51384429
SHA256

0fdc6f4da8880571098ac547d5d7bff0cc393509828d9b6f598c271b01f170dc
SHA512

e714086917b09efded65c2bdb721f950799ff716dc3c4a81a409d6d38054b33677d00337b628b8f68d5e2d8a746a53f7e01fb3051054d28d9335298dd309b086
SSDEEP

12288:RDp8dOeR2+4HcoDdp4QKtv8dTMlMEAS2zSsnRPeJctqXMc7dUER3NgAnF:QdOePac+pfQUT3OEPe8qXt7KcnF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
INV00938773737.exe

Files

INV00938773737.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 613KB - Virtual size: 612KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ