xGgJk42G7Sqo7zi[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

xGgJk42G7Sqo7zi.exe
Size

589KB
MD5

7e05e729cdf73e8e8da416d127110a63
SHA1

04e3c6e31def446209a18f04903fa9648bdb61ff
SHA256

15f8390b37fb35a6ee1d47c60914fdea8db15bbb8137135c05bbddfa2c6c2c0d
SHA512

b52f89eca70c650d08dff77b4d84a4087fc9547c9a5ba922b5837ef182f5ed4e7dcbd92554cb8a86f88183cd8a3472918ca55f283472027085d1daeddff1e95a
SSDEEP

12288:rU+qoaGcuuCr689v2QeTZECL4Mdyus8fsqwMPySKyMT:rbZGavFeTHyubEqwoyOM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
xGgJk42G7Sqo7zi.exe

Files

xGgJk42G7Sqo7zi.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 586KB - Virtual size: 586KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ