US2TZfFlHhqVLSN[.]exe | Triage

Sharing

General

Target

US2TZfFlHhqVLSN.exe
Size

685KB
MD5

b466d0d13ad453ad5b5484970b985a47
SHA1

bee2493e564e52d70ef239e45f16adf81f8269eb
SHA256

d47ffa12778a36d3282598931fbd4614b0215ba1643a59dfdb7e80d8fffa5ead
SHA512

a59cf55ffc41a3b1e8f23f1be4a4478bc62c9656013ddde00bc32325b4a95b2bea36e4469237e614c614898be82a1aab3dc57ba54f90d144838375c8a3003cb3
SSDEEP

12288:op+f4mfJw1Ubv41BCGJzLux0JCp+cwSrtZ0oqtH9fJ:+gBwREGJfOnpJFqbB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
US2TZfFlHhqVLSN.exe

Files

US2TZfFlHhqVLSN.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 674KB - Virtual size: 673KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ