목도서버 접속기v0[.]03[.]exe | Triage

Sharing

General

Target

목도서버 접속기v0.03.exe
Size

590KB
MD5

1575016d1f1682737797705002d484c3
SHA1

5ec35956ec585596bff843f56b85c919a4712e08
SHA256

bb8379f3649eea6d07d38af9984395cd3555f14c6f003754e054395c95b1558b
SHA512

e820733ac72f1b09ed4c7c909868128806ff583f8b71b3db5cb5f4935760cd3ded83c92afd5d90926c7fbf1ab906cae512bc3614596bc8a9ad02db799a47137a
SSDEEP

12288:0uK7lpMWrZN+TCVDVcNLIjOiptOmajLedJU:0blpMWrZkeMujOipttdJU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
목도서버 접속기v0.03.exe

Files

목도서버 접속기v0.03.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 553KB - Virtual size: 552KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ