printed_letter_20231013001[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

printed_letter_20231013001.exe
Size

743KB
MD5

b5796f1cd599365085df50f7bca30207
SHA1

3f76d298c028073e58b5acc7fa4fbde672ccf524
SHA256

2f9ca7d57b530ffe090e47cc0d347083a86f83a70fe052014ce368a5ae31b239
SHA512

93f34cd7d44cb21d033bcf71d58c29c282a3a89eca2422e306056d74473143e4faa879f60064990a4b9b1d4709b3beed20ce46637f41225534ff313c6399e24b
SSDEEP

12288:E74GwQJEU0H9uRiu2K5dVOY1lmZao/AUDzwF4EX:E74JQSDwOAVziaWDzwFfX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
printed_letter_20231013001.exe

Files

printed_letter_20231013001.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 741KB - Virtual size: 740KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ