674[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

674.exe
Size

736KB
MD5

f834cbb49e578ce401d029c02c8eb1ca
SHA1

2a46804b707dd046d64d5fcde958de03365c8b4d
SHA256

b3024132e74fb659f4318ea3b5623477a590ca25b86e4d733b1870d06868c826
SHA512

280dc3b4f36664a991fa8a1054e030e1264bba931dc8aa1e7506b3c3d48cfb0bc362930b5b596c4b7d0235670da79dd28ea82e4b8308eed8eb7d9daf38ddea34
SSDEEP

12288:wt+pbR2XtS47JsS1CqKeH8vYFi94vSylA0C+yj:wt+pbR2XtTJsNeH8vYFIWX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
674.exe

Files

674.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 733KB - Virtual size: 733KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ