Oferta OFER30052023 NTV[.]exe | Triage

Sharing

General

Target

Oferta OFER30052023 NTV.exe
Size

612KB
MD5

93df36476069ba35847c30ad26d05880
SHA1

2d4b1ec873a68e489128bfe0b345e26d3601bc85
SHA256

0422c9546bd72399494b2f89026d1bccb6ce039e76d4df745d11e8d29d298b77
SHA512

2b5cdbd2ff55b9bc823ca0c3c1de94fb6fa36b01d2fbaa8b9de2cd23f3aa32b7b1fb733dc12467c51f082eb2563be379f96776553a0d545f41f096a974c32071
SSDEEP

12288:WmAY2kcdbL4Efqb7lsHgUtOrRu+Tjp4MT1ociOl1Rx4zxOn/olpbKOa:fN6GEfqKHgUt4vjp4ali2uQKpbb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Oferta OFER30052023 NTV.exe

Files

Oferta OFER30052023 NTV.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 607KB - Virtual size: 606KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ