LLC KHIMAKTIV SOFT Po Official_2023[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LLC KHIMAKTIV SOFT Po Official_2023.exe
Size

646KB
MD5

72bb8a7c5686dac2ffa6b8554f14beff
SHA1

5b45509e2fb098d8ec8f515737885a825a28c25d
SHA256

145c1ede38b85b82e5072f2d9c0c65aa8eb479bd2cf90d99d7d375c0c2e7c4ea
SHA512

bcf699039ae829ed7d87f0732e33392d2b5946aabc62de418e00712d69cdfe68249a3535baa18489e86727846d44a82b3d8e2cc7107020d46799e5060ef829f3
SSDEEP

12288:lV9KSMDfXVKy/jPqCdmgzKMGGwlnITXbebLw:HST/DCGw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LLC KHIMAKTIV SOFT Po Official_2023.exe

Files

LLC KHIMAKTIV SOFT Po Official_2023.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 635KB - Virtual size: 634KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ