5Kk4IkGdzhwkzqG[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5Kk4IkGdzhwkzqG.exe
Size

637KB
MD5

6ccf57d39464301de26e95efee0495b2
SHA1

bf49349bf4d86639e360f471e76076687ff85efa
SHA256

f7e80f5e92bd4d9267be950088a9f5b1117a873868329bba0e927701f87c8fec
SHA512

22bde9a966bb5936881a09bede947df0890fb8025136f981bf73d72304253977ef3b8cc298e9550ce9383459e6c61117480747ccbdee42fd78168150a7a702c4
SSDEEP

12288:sfb/WT4UkuZbFlOdF+7bxvJuBwE+mXH9oVRqYsk+Ostdel4QoXVLx:sfzW/ZbF8dF+7dhbAG2YsDbel4Qof

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5Kk4IkGdzhwkzqG.exe

Files

5Kk4IkGdzhwkzqG.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 631KB - Virtual size: 631KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ