2363104503_4202741358 - Tri_H20_1[.]img | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2363104503_4202741358 - Tri_H20_1.img
Size

1.2MB
MD5

f3b8cbd27526148e619ca2df09b1a169
SHA1

fee86052cbe9342fa8295f170499fa6c666b1134
SHA256

611590ea7b864cd75ccd593f6316da229de530f3bd32b6bcd8f7a31f1f7c6cda
SHA512

bfbe92f47dfd11fa8f1b4bfb2ec4cbaf7894b3cd5c8ba4137d5e1ae8dd707d230d0365e0a087f3caa45e6570d493c8b723253e705cd760449e59b7e238e41738
SSDEEP

12288:L7y3YPOJZPe+5/XzaD/qxhM4cEaDb93OdB6XfvKsEEv+by+k8rkPz:q3ze+5/XWbhT31ABMfvKVE2bm8Sz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/23631045.EXE

Files

2363104503_4202741358 - Tri_H20_1.img
.iso
23631045.EXE
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 673KB - Virtual size: 672KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ