DelayRemoverV2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DelayRemoverV2.exe
Size

66KB
MD5

cdf40237caceb177a357793b7eb99f9a
SHA1

60b90a121534470d2a4019f9f1549832b055f83f
SHA256

50a215998284377b885365986bf7509fc103a2f59d6de2e87705e204a10a9963
SHA512

2ba36791132425f4ff1d44a244e677f00092d672d481a94c8d85e67592f908759daa9fcd02fb7cdc3741466a2ea7393a3e5ab8c90773e22dad2303f0d416ba22
SSDEEP

768:GnZYutJPdfwDb6mlt3dQyD0crbCVfRraT0o6HwoiwDwOGLhaiZ2AkO:JuLVfitZQcbCNVY6HwYDwOGLp1T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DelayRemoverV2.exe

Files

DelayRemoverV2.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ