1694675131[.]exe | Triage

Sharing

General

Target

1694675131.exe
Size

234KB
MD5

bcf814102cd9c3d69f552e8f31bc985e
SHA1

cc0337548f4f9ecff8a5f27483a7fd9ce511e5ec
SHA256

4b0775da4b2e1ef6c2dcf0cf47f87c99c77773806877f6c725812c3bf813ea36
SHA512

0739078d085b4075db99271d34e8440d2c0d2ae4b9df3c18f7864ada8ac3f47f251c1ca11cfa88197f3387f00fc0447ff7a70a0a1e28619f940d2a8acb1ebdb4
SSDEEP

3072:vmkHdE+02qRIGYrP6OUHgz5dHtSyXQTxaxz2lJE2cWUQlaQMpjlaFKc:vJdDkcP6Oygz5dNVQizgyRjsF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1694675131.exe

Files

1694675131.exe
.exe windows:4 windows x64

b4c6fff030479aa3b12625be67bf4914

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sith
Size: 228KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE