l4bZfp09oCXrM2z[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

l4bZfp09oCXrM2z.exe
Size

599KB
MD5

8a8e48da36503f461ea0cb0a219a000e
SHA1

9950f2eef6d8943ec8e7f39c7c64b4ed33089d53
SHA256

dce4923a6dcb568fd39088155bf318b105cb239c3a65b9ffa89f54cad3ae3d76
SHA512

cabd9c60c94b6de73b1c10d83a35bb08fe5f9a0cbc7d0b29e00d0035891bf1dfa80d0404e9ebcff82ba54ec6299b1262032e48972a1e33ed3f3b13095c02280d
SSDEEP

12288:3N0WWObWdmMO2eUrHNgCBUdYqmB7Suc4g/b6k4lBW:a4YmueUrtgCAYqiSuS34lB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
l4bZfp09oCXrM2z.exe

Files

l4bZfp09oCXrM2z.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 584KB - Virtual size: 584KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ