unvp[.]exe | Triage

Sharing

General

Target

unvp.exe
Size

628KB
MD5

60e0cb2dda65e61f07b78667b34ecbd2
SHA1

4f974ad07111c0cf5082cb1fa039ed7718f4d6b0
SHA256

26a294c50930c0cd9fbed08dd7fb63ea59bd2300eed46c452de0b4c5f7b95309
SHA512

765704d47c86fbb46b184b39cf7aefcd69123f5284c416276e3d93dc9fe0f9ca7d868c8e88261122a93d8915a2cb7d403479fcd087f5cf28ccc15ed15c3a5c0b
SSDEEP

12288:lJ0yXuN/VvbwTDgbLOtG7YaehgZHLWl5EHCNumB0s:z0EAdvEgelaeSHRy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unvp.exe

Files

unvp.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 559KB - Virtual size: 558KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ