rDPO23-I-086GARDEXFLOWMETERiv[.]exe | Triage

Sharing

General

Target

rDPO23-I-086GARDEXFLOWMETERiv.exe
Size

793KB
MD5

8a14dacb5b4e3171d64dc4cee7c541eb
SHA1

5b2fe2aabce1066ac5fb20e60c94591272ecccf7
SHA256

0d05c9ec5cbccc7252bfa4f1fe3da5ac89c431fb9aba15fcbf28621cf2f2a48d
SHA512

6b51a6a3910eac6c806530a213f2c77b486ef24f68e5b813870f5c4454e5645bda737c896caec9c913d7f524e5f32de7b26a5192852328a68023cf8c85040db6
SSDEEP

12288:Y8zS55mFzv8PqWOv3NlQyyTcF5BujcbiMq4hB/OBjwQt:Yf55qT8Pqp/NGyyT81biMJ/OBj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rDPO23-I-086GARDEXFLOWMETERiv.exe

Files

rDPO23-I-086GARDEXFLOWMETERiv.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 603KB - Virtual size: 602KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 189KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ