OHsVZrMWyG1fesy[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

OHsVZrMWyG1fesy.exe
Size

712KB
MD5

cc5fef3c5892d3d28b133d59b7e88e02
SHA1

31030ec08e1869698ba1ddb6c48182cde933ae2e
SHA256

57454ca5dffc314f665767b53dde6778afe2ef9b3470eadc71ada2130854ab2d
SHA512

0dbf5217c8e5fc1b8fc6ae26e08b8c3c2c0b17e5b844306996571408e8df66e3cbfb44c59eef9679ef89ef72433853c0f547d8444371372be7e432120b55b5ed
SSDEEP

12288:Xis7lfhe7tk7A6rCMQSXfgCamv82duKLqc0rbPJHIXb:jwtkFrpxX7vZuEH03R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OHsVZrMWyG1fesy.exe

Files

OHsVZrMWyG1fesy.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 704KB - Virtual size: 704KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ