MobaXterm1_CHS1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MobaXterm1_CHS1.exe
Size

13.6MB
MD5

98d4551761944f07d7561d1053cbe9a8
SHA1

cea1866b0e4284c955586b27efb61ed55d4e5997
SHA256

e4743481179a25874b5d938630b050c82b959382e8e09fb4ec2f34b34618ab19
SHA512

f2c55fec939c8d5c772ebf7a3c7238f5cf2d21e29ff9884267c42e4782563a1bae71aa3c4a1177fc4b369d039a1c959eb4842deef40da6a231155da63c88b9d9
SSDEEP

196608:Qwl+LYtey08Lz2laoJsp4q0smm/7tUN+uFRJWSik8R9FIshnM6jcG2oQ+io:Qzk1L6lXGl0srtUN+aJWSikqVfjao5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MobaXterm1_CHS1.exe

Files

MobaXterm1_CHS1.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 536KB - Virtual size: 536KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 162KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7.1MB - Virtual size: 7.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ