Yararsiz[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Yararsiz.exe
Size

233KB
MD5

883543b779a5679fa4b7fa136a9871ed
SHA1

ebdf0bc00735af3bf6e0d066a9fee0da969504ed
SHA256

5b14b6afb160bfb0d5e7687533598809d7a2636dbb099aabeddc4d6cd0bffbc1
SHA512

c3c6084461e4d9d5ca795065be613ab0e8abc0cf46fbc51dc837a6696be556fb0fb4467d04b6d58918089c54b33f8629add3a8d5ec069100d4a2bb9a0cc81f38
SSDEEP

6144:oxJH1UUdLe8lqDYbXgE1w+X3GBdXMBg8AOhLuJvNR4z58R/tNBjlj5Slced:oxJH1LdLZX0E1wc3GBdMtvcP4+1NBBj5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Yararsiz.exe

Files

Yararsiz.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 226KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ