ORD- EPC-170-2023L dt 15[.]08[.]2023 - AIL - PLANT# VA03[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ORD- EPC-170-2023L dt 15.08.2023 - AIL - PLANT# VA03.exe
Size

742KB
MD5

a30e397e4ee8fb4091c896fd2d52fb36
SHA1

e326629b6cdc17a1bc02dc36f92ccbb144df95c0
SHA256

c1a46fa04740b97fb8ffd1a24b00a770dd5ccb929a66583ed48a4ce75da7c175
SHA512

902bfbf9e6e93eaa3fe13210baac83cb9741d869fb520970f46ef845b021f1a0279a0f8f2413161efc6afb6f0b5ffbc279817ad88c65cabe312520b41ddf3650
SSDEEP

12288:YtBqxM8a1WBZdtimfYgdAMxgbdWieNScr0Sc7OpN05:sBqmYz3EIbScr0SQAc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ORD- EPC-170-2023L dt 15.08.2023 - AIL - PLANT# VA03.exe

Files

ORD- EPC-170-2023L dt 15.08.2023 - AIL - PLANT# VA03.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 734KB - Virtual size: 733KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ