PRE-ALERT IOF23-24JPR1298[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PRE-ALERT IOF23-24JPR1298.exe
Size

17KB
MD5

23bf74d9c7e0e816a29b94d91b75926b
SHA1

e01bfdff08225928661098745a96182a7fc2c20f
SHA256

b391e7e830edbf4c165f4e3d6b54c7a0e69a4a6f1341f1a2db53bc9c6ac53209
SHA512

5f8d6700267f40bbb136a9cfdab3f565c59ae0de1fe39e913a459859a0b4851c3f8b9c8bfedace974f1095bb0bb4619e6eb3de61452ef197ad57d6dfedef14a2
SSDEEP

192:ClZHUTdUKyTkI1BCnVNhUUegQ5cF0p2WT/kYeXnTHavgC/lUD7grIMwG4skL0U9u:e9TkIWnjhUz3oerbmXTNCe+wtsY3T0w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PRE-ALERT IOF23-24JPR1298.exe

Files

PRE-ALERT IOF23-24JPR1298.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ