thong bao hang den 20233_2414458944[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

thong bao hang den 20233_2414458944.exe
Size

719KB
MD5

bc68f01eac3e7db54d08d7114e752560
SHA1

4ab1a13cc6bdcf50fd3fc32b6bf6667ac8f49b94
SHA256

a787e3b32663d3b07dfa01f487ab5b0b94dcc8d28ff7a819b30275dd04b269b5
SHA512

0e66d83663109fda7472c5e711b9a781b4a79072a9f8ba7e287a1aa802e4837c65be81a6234911a2fbe90a81ec02856267429f0361f14ee388dfefc7a1b51934
SSDEEP

12288:TmbufJw1UMJyiO/y18a5aG99mAS1Kuq/2pyBQfJ:NBwNLc+86bXSIu62pymB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
thong bao hang den 20233_2414458944.exe

Files

thong bao hang den 20233_2414458944.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 708KB - Virtual size: 707KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ