JhlYSFlGxtbcpq3[.]exe | Triage

Sharing

General

Target

JhlYSFlGxtbcpq3.exe
Size

706KB
MD5

6df6398d05095b3525c9c48622106f0a
SHA1

5e3cf6e886779241ce5c9359b23245a0ab60c33a
SHA256

e679f8ae19b12c46495a7e36cd54681519f422f5bec5b21eca0b50be702dbe90
SHA512

07a139bb497d95038167a8e9e7146a98c2bd62ee9d3ece65294fd209f8f9734eade8aecb9616bfd67a09b0b640b30a8035f7d8e73abfc78d90ab44edf25eb15f
SSDEEP

12288:9ciAckjJSL9LW21lUNVxI0ld29karfV0InARtxnXCXGOWouYfWulAuvrTV:fkFOY2L0d2HWCARPsTcWXlAuvH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JhlYSFlGxtbcpq3.exe

Files

JhlYSFlGxtbcpq3.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 685KB - Virtual size: 685KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ