Unconfirmed 80639[.]crdownload | Triage

Resubmissions

20/07/2023, 14:50

230720-r7nmlshb43 7

20/07/2023, 14:46

230720-r5e8fshf8v 10

Sharing

Copy URL Twitter E-mail

General

Target

Unconfirmed 80639.crdownload
Size

198KB
MD5

4d01aa071dff015482330256bf1317b6
SHA1

011151e918cd54f6398fbba1bd9a8708da3dee20
SHA256

264d9d1911997fcb11c7174b916ba4b181a4e105d2d18c2c6fa8348e9b5e4d63
SHA512

58606005a93a7dfdb1ac7cc961286c7be538932256ec95dbb4befd223ff757c17a11516c93452409fc38cc8b7e9c9de8096dc654fad9cb434f628ab0dfa55d16
SSDEEP

1536:bgeFTY3p1ZCkWtmV3D+BmjgYhe4UErmZE47TP8hA47yAMryBULLpk+MWcIKE9VHB:bTbBpUE/hFW/Kl+a/m0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Fegaep4502023.exe

Files

Unconfirmed 80639.crdownload
.iso
Fegaep4502023.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ