index #98000443AD[.]exe[.]malz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

index #98000443AD.exe.malz
Size

699KB
MD5

90c250d0460b6df095a0ca8a65227ad5
SHA1

26f43d575148b54ec6e39a143a5d5c414d69f47e
SHA256

2eaf94da95c7c5bfeee85e0c9b2eeb4203bc708e8538061624082b61866bc3b5
SHA512

58d0647c188b878081b34238643d2fdf2c8120f4dcea963791445309df9c9ab08a85127d2541e8c5e2845ee2d1d6ff774d4eafc520aa54d391a9bbe2f146bc0e
SSDEEP

12288:DGr7nV/Oug96Ef0K25/pVaoMmqzpF3nyXgUSb7XLQr0wK4eJJ/dbbUuWkqUYnHPJ:cEB96OwhV2mcpV8SbzLY0wKRRb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
index #98000443AD.exe.malz

Files

index #98000443AD.exe.malz
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 697KB - Virtual size: 696KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ