shk098654578[.]exe | Triage

Sharing

General

Target

shk098654578.exe
Size

405KB
MD5

9a9100bb44845bdca0f6f2c7fcd09c28
SHA1

da89801f49adaa1f864ba8ddb0c7526d1d5d81fe
SHA256

efae2917baa8189a375577739cd5d6bf9b759ff81fe27b779dfa6b0d53eecea3
SHA512

f12e7d9f5a55191c69be2ee09d95055c698e6488d33e77a3332a19714bc4b29147eeeb45e977a00c7f0f7c89ad182a84417aed8db838e0cfdd73b8327a1e8245
SSDEEP

12288:VId24YQIrcxfY/5jfC4EONn0zFQUOrBN:VTYIwBY/5TNnWQUOrr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
shk098654578.exe

Files

shk098654578.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ