aslsgh[.]exe | Triage

Sharing

General

Target

aslsgh.exe
Size

1.1MB
MD5

e50a1bcd64d09e30d14808184359f693
SHA1

1886dc9ff0fdc999194601db689c04e90a6876df
SHA256

d1f5f8329a9d7e29899f1c171ad24b96210208caabbe2f41d408bb390ee691e1
SHA512

8376f1c03b2c4a573697c4c00f0c73eb1412c91e0af08f5002a51818a7d32b42748427b00204b2f5539763ab5d96ddcdeacd8f2722d7d4031d7f254eacc3178d
SSDEEP

12288:bTPgbpXnkP2IbuRPXNHBhjyEKx2DWNz2Ud6GYFlD2p:bT4JnPLRftQNPwG4g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aslsgh.exe

Files

aslsgh.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 708KB - Virtual size: 708KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 407KB - Virtual size: 406KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ