zkE0sgJhETMO1uB[.]exe | Triage

Sharing

General

Target

zkE0sgJhETMO1uB.exe
Size

643KB
MD5

1856780ce368c804d161c4ac210b3ac3
SHA1

aeeb309333e51c957c9186d85529cdd0b36d8aa8
SHA256

530818a929752565849f8b1fab483a6a78d76488472db01106114046e2dd3466
SHA512

02e4945dfdf779bbfc13038c0ad887c68492adc9b5cd6546f527072ab6c8f4ba209f35563f2b2d03155734b153c92f28af3bf517a16a19a3ba6e67d569cce78b
SSDEEP

12288:eDp8BHpXxeH2RINKDbmxYJJh+kBeVgRhLa/l5fi:3BJXxeWuNKHmxg+Qgi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
zkE0sgJhETMO1uB.exe

Files

zkE0sgJhETMO1uB.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 640KB - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ