Genalf[.]exe | Triage

Resubmissions

22-07-2023 16:58

230722-vg51rabe85 10

22-07-2023 16:54

230722-vemrdsbe78 10

Sharing

General

Target

Genalf.exe
Size

4.4MB
MD5

859548a7f3a98727f5d07f82e53b3973
SHA1

f86c376661bd7d15d2ef663ac94990f72255ee8e
SHA256

f395924891b51c1131ea1f3b27cacd12ab52bbb63a1ee6b2d380f6f6db238510
SHA512

d0f4c667bc019b568eec09f7db930c0c3763594225a8ddc741c3a52d692a48942162bc6a7c0622ec966916407496d37f42f10baa82320da8d275230d1e481b72
SSDEEP

98304:f9QSpqvxZ6PghB4/ErFi244Nqk9Ht15Uwe6zEPxhBgu4IGvzm:fTqpZ6PuB4/EJiT4NJN12UgP4I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Genalf.exe

Files

Genalf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ