r83kGPGIDBWUCGnA[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

r83kGPGIDBWUCGnA.exe
Size

719KB
MD5

b64c13b78d6dbf04651bed2bab12d12d
SHA1

eeafb3abad4f444196f20595a8b0ab1962c1897c
SHA256

e54d0568b4987713be85f584b8311a3af96dbc703e99c0a8be6826c158120d8b
SHA512

931365bbf041bb95eaa113cc4c0eb3eebae42cc986e604b29b36c1e6686462875f5e6d7a94b949d47d82609ae779bfb0fc24aeed76601e91cb5cbc619854fe13
SSDEEP

12288:bdYUw2iNtTr7PqDC17mBUwFKzS2cz5qThOOsc+HIxYo/yOhFveNSAGtu48:qUw1frIe6BBFKzKiscuAyOhF2NSAGwb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
r83kGPGIDBWUCGnA.exe

Files

r83kGPGIDBWUCGnA.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 717KB - Virtual size: 716KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ